# Huawei EMUI. Every CVE that names Huawei EMUI among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Incorrect default permissions in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-30415.md) `CVE-2024-30415` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Apr 2024 · Tags: Broken access control - [OS command injection in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-30414.md) `CVE-2024-30414` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 7 Apr 2024 · Tags: Command injection - [Incorrect permission assignment in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-30413.md) `CVE-2024-30413` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 7 Apr 2024 · Tags: Broken access control - [Missing authentication in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48621.md) `CVE-2022-48621` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 18 Feb 2024 · Tags: Authentication bypass - [Code injection in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52381.md) `CVE-2023-52381` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Feb 2024 · Tags: Code injection - [Vulnerability of improper access control in the email module.Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2023-52380.md) `CVE-2023-52380` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 18 Feb 2024 - [Incorrect default permissions in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52379.md) `CVE-2023-52379` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 18 Feb 2024 · Tags: Broken access control - [Protection mechanism failure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52378.md) `CVE-2023-52378` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Feb 2024 · Tags: CWE-693 - [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52377.md) `CVE-2023-52377` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.4 High · Not analysed yet · Published 18 Feb 2024 · Tags: Memory corruption - [Information management vulnerability in the Gallery module.Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2023-52376.md) `CVE-2023-52376` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 18 Feb 2024 · Tags: CWE-212 - [Improper access control in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52375.md) `CVE-2023-52375` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 18 Feb 2024 · Tags: Broken access control - [Incorrect authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52374.md) `CVE-2023-52374` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 18 Feb 2024 · Tags: Broken access control - [Vulnerability of permission verification in the content sharing pop-up module.Successful exploitation of this vulnerability may cause unauthorized file sharing.](https://agentprime.io/advisories/CVE-2023-52373.md) `CVE-2023-52373` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 18 Feb 2024 · Tags: CWE-281 - [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52372.md) `CVE-2023-52372` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 18 Feb 2024 · Tags: CWE-20 - [NULL pointer dereference in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52371.md) `CVE-2023-52371` · CVE record: Huawei HarmonyOS and 1 more · CVSS 3.5 Low · Not analysed yet · Published 18 Feb 2024 · Tags: Memory corruption - [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52370.md) `CVE-2023-52370` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Feb 2024 · Tags: Memory corruption - [Out-of-bounds write in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52369.md) `CVE-2023-52369` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Feb 2024 · Tags: Memory corruption - [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52368.md) `CVE-2023-52368` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 18 Feb 2024 · Tags: CWE-20 - [Improper access control in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52367.md) `CVE-2023-52367` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.7 High · Not analysed yet · Published 18 Feb 2024 · Tags: Broken access control - [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52366.md) `CVE-2023-52366` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 18 Feb 2024 · Tags: Memory corruption - [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52365.md) `CVE-2023-52365` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.7 High · Not analysed yet · Published 18 Feb 2024 · Tags: Memory corruption - [Vulnerability of defects introduced in the design process in the Control Panel module.Successful exploitation of this vulnerability may cause app processes to be started by mistake.](https://agentprime.io/advisories/CVE-2023-52363.md) `CVE-2023-52363` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 18 Feb 2024 - [Incorrect default permissions in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52362.md) `CVE-2023-52362` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 18 Feb 2024 · Tags: Broken access control - [Logic vulnerabilities in the baseband.Successful exploitation of this vulnerability may affect service integrity.](https://agentprime.io/advisories/CVE-2023-52360.md) `CVE-2023-52360` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 18 Feb 2024 · Tags: CWE-511 - [Vulnerability of configuration defects in some APIs of the audio module.Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2023-52358.md) `CVE-2023-52358` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 18 Feb 2024 - [Deserialization of untrusted data in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52357.md) `CVE-2023-52357` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 18 Feb 2024 · Tags: Insecure deserialization - [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52097.md) `CVE-2023-52097` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 18 Feb 2024 · Tags: Information disclosure - [Resource reuse vulnerability in the GPU module.](https://agentprime.io/advisories/CVE-2023-52387.md) `CVE-2023-52387` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 18 Feb 2024 · Tags: CWE-664 - [Vulnerability of permission verification for APIs in the DownloadProviderMain module.](https://agentprime.io/advisories/CVE-2023-52106.md) `CVE-2023-52106` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.4 Medium · Not analysed yet · Published 16 Jan 2024 · Tags: CWE-264 - [Vulnerability of parameters being not verified in the WMS module.](https://agentprime.io/advisories/CVE-2023-52104.md) `CVE-2023-52104` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2024 - [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52103.md) `CVE-2023-52103` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jan 2024 · Tags: Memory corruption - [Improper output encoding in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52102.md) `CVE-2023-52102` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2024 · Tags: CWE-116 - [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52101.md) `CVE-2023-52101` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jan 2024 · Tags: Information disclosure - [Improper access control in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52099.md) `CVE-2023-52099` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2024 · Tags: Broken access control - [Uncontrolled resource consumption in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52098.md) `CVE-2023-52098` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2024 · Tags: Denial of service, CWE-116 - [Vulnerability of process priorities being raised in the ActivityManagerService module.](https://agentprime.io/advisories/CVE-2023-52108.md) `CVE-2023-52108` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2024 - [Improper privilege management in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52107.md) `CVE-2023-52107` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2024 · Tags: Privilege escalation - [Improper privilege management in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52116.md) `CVE-2023-52116` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2024 · Tags: Privilege escalation - [Improper privilege management in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52114.md) `CVE-2023-52114` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2024 · Tags: Privilege escalation, Broken access control - [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-44112.md) `CVE-2023-44112` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2024 · Tags: Information disclosure - [Uncontrolled resource consumption in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52113.md) `CVE-2023-52113` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2024 · Tags: Denial of service - [Files accessible to external parties in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52112.md) `CVE-2023-52112` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 16 Jan 2024 · Tags: Information disclosure - [Improper authentication in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52111.md) `CVE-2023-52111` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2024 · Tags: Authentication bypass - [Insufficient verification of data authenticity in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52109.md) `CVE-2023-52109` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2024 · Tags: CWE-345 - [Authentication bypass by spoofing in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-44117.md) `CVE-2023-44117` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2024 · Tags: Authentication bypass - [Authentication bypass by spoofing in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-4566.md) `CVE-2023-4566` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2024 · Tags: Authentication bypass - [Incorrect default permissions in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-6273.md) `CVE-2023-6273` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 6 Dec 2023 · Tags: Broken access control - [Open redirect in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-49240.md) `CVE-2023-49240` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Dec 2023 · Tags: Open redirect - [Unauthorized access vulnerability in the card management module.](https://agentprime.io/advisories/CVE-2023-49239.md) `CVE-2023-49239` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Dec 2023 - [Incorrect authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-49246.md) `CVE-2023-49246` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 6 Dec 2023 · Tags: Broken access control - [Unauthorized access vulnerability in the Huawei Share module.](https://agentprime.io/advisories/CVE-2023-49245.md) `CVE-2023-49245` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Dec 2023 - [Permission management vulnerability in the multi-user module.](https://agentprime.io/advisories/CVE-2023-49244.md) `CVE-2023-49244` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Dec 2023 - [Vulnerability of unauthorized access to email attachments in the email module.](https://agentprime.io/advisories/CVE-2023-49243.md) `CVE-2023-49243` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Dec 2023 - [Free broadcast vulnerability in the running management module.](https://agentprime.io/advisories/CVE-2023-49242.md) `CVE-2023-49242` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Dec 2023 - [API permission control vulnerability in the network management module.](https://agentprime.io/advisories/CVE-2023-49241.md) `CVE-2023-49241` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Dec 2023 - [Missing authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-44113.md) `CVE-2023-44113` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 6 Dec 2023 · Tags: Broken access control - [Improper check for unusual conditions in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-44099.md) `CVE-2023-44099` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Dec 2023 · Tags: CWE-754 - [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-49248.md) `CVE-2023-49248` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Dec 2023 · Tags: CWE-20 - [Improper certificate validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-49247.md) `CVE-2023-49247` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Dec 2023 · Tags: Weak cryptography or TLS - [Permission management vulnerability in the PMS module.](https://agentprime.io/advisories/CVE-2023-46773.md) `CVE-2023-46773` · CVE record: Huawei HarmonyOS and 1 more · No CVSS score · Not analysed yet · Published 6 Dec 2023 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .