# Huawei EMUI. Every CVE that names Huawei EMUI among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Permission control vulnerability in the Bluetooth module.](https://agentprime.io/advisories/CVE-2026-101184.md) `CVE-2026-101184` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-264 - [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2026-101178.md) `CVE-2026-101178` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.6 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Information disclosure - [Permission control vulnerability in the Optimizer module.](https://agentprime.io/advisories/CVE-2026-101177.md) `CVE-2026-101177` · CVE record: Huawei HarmonyOS and 1 more · CVSS 3.7 Low · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-264 - [Permission control vulnerability in the event notification management module.](https://agentprime.io/advisories/CVE-2026-101176.md) `CVE-2026-101176` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.1 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-264 - [Permission control vulnerability in the Settings module.](https://agentprime.io/advisories/CVE-2026-49309.md) `CVE-2026-49309` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-264 - [Permission control vulnerability in the app management module.](https://agentprime.io/advisories/CVE-2026-41987.md) `CVE-2026-41987` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-264 - [DoS vulnerability in the input device module.](https://agentprime.io/advisories/CVE-2026-49315.md) `CVE-2026-49315` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.1 High · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-264 - [Permission control vulnerability in the notification module.](https://agentprime.io/advisories/CVE-2026-49303.md) `CVE-2026-49303` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: CWE-264 - [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2026-49301.md) `CVE-2026-49301` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Information disclosure - [Improper handling of exceptional conditions in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2026-49305.md) `CVE-2026-49305` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: CWE-755 - [DoS vulnerability in the vibration service.](https://agentprime.io/advisories/CVE-2026-58559.md) `CVE-2026-58559` · CVE record: Huawei Harmony OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: Denial of service - [Permission control vulnerability in the file system.](https://agentprime.io/advisories/CVE-2026-58558.md) `CVE-2026-58558` · CVE record: Huawei Harmony OS and 1 more · CVSS 7.8 High · Not analysed yet · Published 15 Jul 2026 · Tags: CWE-840 - [Permission control vulnerability in the Bluetooth module.](https://agentprime.io/advisories/CVE-2026-58556.md) `CVE-2026-58556` · CVE record: Huawei Harmony OS and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: CWE-264 - [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2026-58554.md) `CVE-2026-58554` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.6 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: Information disclosure - [Integer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2026-41977.md) `CVE-2026-41977` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.0 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption - [Permission control vulnerability in the audio framework.](https://agentprime.io/advisories/CVE-2026-41976.md) `CVE-2026-41976` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.6 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-275 - [Permission control vulnerability in service notifications.](https://agentprime.io/advisories/CVE-2026-41974.md) `CVE-2026-41974` · CVE record: Huawei HarmonyOS and 1 more · CVSS 3.6 Low · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-264 - [Permission control vulnerability in calls.](https://agentprime.io/advisories/CVE-2026-41973.md) `CVE-2026-41973` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-840 - [Out-of-bounds write in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2026-41970.md) `CVE-2026-41970` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 15 May 2026 · Tags: Memory corruption - [Permission control vulnerability in the projection module.](https://agentprime.io/advisories/CVE-2026-41969.md) `CVE-2026-41969` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 15 May 2026 · Tags: CWE-275 - [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2026-41960.md) `CVE-2026-41960` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.8 Medium · Not analysed yet · Published 15 May 2026 · Tags: Information disclosure - [Use after free in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2026-34859.md) `CVE-2026-34859` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 13 Apr 2026 · Tags: Memory corruption - [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2026-34855.md) `CVE-2026-34855` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.7 Medium · Not analysed yet · Published 13 Apr 2026 · Tags: CWE-20 - [Use after free in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2026-34854.md) `CVE-2026-34854` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.7 Medium · Not analysed yet · Published 13 Apr 2026 · Tags: Memory corruption - [Permission bypass vulnerability in the LBS module.](https://agentprime.io/advisories/CVE-2026-34853.md) `CVE-2026-34853` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.7 High · Not analysed yet · Published 13 Apr 2026 · Tags: Privilege escalation - [Vulnerability of improper permission control in the theme setting module.](https://agentprime.io/advisories/CVE-2026-28553.md) `CVE-2026-28553` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 13 Apr 2026 · Tags: CWE-275 - [Improper handling of exceptional conditions in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2026-28542.md) `CVE-2026-28542` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.3 High · Not analysed yet · Published 5 Mar 2026 · Tags: CWE-755 - [Improper privilege management in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2026-28548.md) `CVE-2026-28548` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.1 High · Not analysed yet · Published 5 Mar 2026 · Tags: Privilege escalation - [Out-of-bounds write vulnerability in the IMS module.](https://agentprime.io/advisories/CVE-2026-28552.md) `CVE-2026-28552` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 5 Mar 2026 · Tags: CWE-19 - [Out-of-bounds write vulnerability in the file system module.](https://agentprime.io/advisories/CVE-2026-24928.md) `CVE-2026-24928` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.8 Medium · Not analysed yet · Published 6 Feb 2026 · Tags: Memory corruption - [Use after free in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2026-24927.md) `CVE-2026-24927` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 6 Feb 2026 · Tags: Memory corruption - [Permission control vulnerability in the AMS module.](https://agentprime.io/advisories/CVE-2026-24920.md) `CVE-2026-24920` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 6 Feb 2026 · Tags: CWE-264 - [Out-of-bounds write in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2026-24919.md) `CVE-2026-24919` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.0 Medium · Not analysed yet · Published 6 Feb 2026 · Tags: Memory corruption - [Use after free in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2026-24917.md) `CVE-2026-24917` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 6 Feb 2026 · Tags: Memory corruption - [NULL pointer dereference in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2026-24918.md) `CVE-2026-24918` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 6 Feb 2026 · Tags: Memory corruption - [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2025-68959.md) `CVE-2025-68959` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 14 Jan 2026 · Tags: Information disclosure - [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2025-68970.md) `CVE-2025-68970` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.1 Medium · Not analysed yet · Published 14 Jan 2026 · Tags: CWE-20 - [Weak password requirements in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2025-68963.md) `CVE-2025-68963` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.7 Medium · Not analysed yet · Published 14 Jan 2026 · Tags: Hard-coded credentials - [Permission control vulnerability in the window management module.](https://agentprime.io/advisories/CVE-2025-66329.md) `CVE-2025-66329` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.0 Medium · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-264 - [Permission control vulnerability in the package management module.](https://agentprime.io/advisories/CVE-2025-66325.md) `CVE-2025-66325` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-264 - [Use after free in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2025-58311.md) `CVE-2025-58311` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.8 Medium · Not analysed yet · Published 28 Nov 2025 · Tags: Memory corruption - [Permission control vulnerability in the Settings module.](https://agentprime.io/advisories/CVE-2025-58302.md) `CVE-2025-58302` · CVE record: Huawei HarmonyOS and 1 more · CVSS 8.4 High · Not analysed yet · Published 28 Nov 2025 · Tags: CWE-264 - [Out-of-bounds read in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2025-58314.md) `CVE-2025-58314` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.6 Medium · Not analysed yet · Published 28 Nov 2025 · Tags: Memory corruption - [Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2025-58276.md) `CVE-2025-58276` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 5 Sept 2025 · Tags: CWE-264 - [Vulnerability of inadequate packet length check in the BLE module.](https://agentprime.io/advisories/CVE-2025-54646.md) `CVE-2025-54646` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-130 - [Out-of-bounds read in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2025-54644.md) `CVE-2025-54644` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.6 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: Memory corruption - [Out-of-bounds read in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2025-54643.md) `CVE-2025-54643` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.6 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: Memory corruption - [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2025-54642.md) `CVE-2025-54642` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.7 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-20 - [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2025-54641.md) `CVE-2025-54641` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.7 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-20 - [Out-of-bounds read in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2025-54637.md) `CVE-2025-54637` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.4 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: Memory corruption - [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2025-54636.md) `CVE-2025-54636` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.4 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-20 - [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2025-54632.md) `CVE-2025-54632` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: Memory corruption - [Integer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2025-54631.md) `CVE-2025-54631` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.7 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: Memory corruption - [Race condition in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2025-54629.md) `CVE-2025-54629` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.7 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: Race condition - [Vulnerability of incomplete verification information in the communication module.](https://agentprime.io/advisories/CVE-2025-54628.md) `CVE-2025-54628` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-118 - [EXTRA_REFERRER resource read vulnerability in the Gallery module.](https://agentprime.io/advisories/CVE-2025-54611.md) `CVE-2025-54611` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.3 High · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-840 - [Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2025-53186.md) `CVE-2025-53186` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 7 Jul 2025 · Tags: CWE-264 - [Use after free in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2025-53185.md) `CVE-2025-53185` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.6 Medium · Not analysed yet · Published 7 Jul 2025 · Tags: Memory corruption - [Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule reminder function of head units.](https://agentprime.io/advisories/CVE-2025-53178.md) `CVE-2025-53178` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 7 Jul 2025 · Tags: CWE-264 - [Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule syncing function of watches.](https://agentprime.io/advisories/CVE-2025-53177.md) `CVE-2025-53177` · CVE record: Huawei HarmonyOS and 1 more · CVSS 3.9 Low · Not analysed yet · Published 7 Jul 2025 · Tags: CWE-264 Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .