# Huawei HarmonyOS. Every CVE that names Huawei HarmonyOS among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Permission control vulnerability in the Bluetooth module.](https://agentprime.io/advisories/CVE-2026-101184.md) `CVE-2026-101184` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-264 - [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2026-101178.md) `CVE-2026-101178` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.6 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Information disclosure - [Permission control vulnerability in the Optimizer module.](https://agentprime.io/advisories/CVE-2026-101177.md) `CVE-2026-101177` · CVE record: Huawei HarmonyOS and 1 more · CVSS 3.7 Low · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-264 - [Uncontrolled resource consumption in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2026-101174.md) `CVE-2026-101174` · CVE record: Huawei HarmonyOS · CVSS 5.7 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Denial of service - [Uncontrolled resource consumption in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2026-101173.md) `CVE-2026-101173` · CVE record: Huawei HarmonyOS · CVSS 6.5 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Denial of service - [Permission control vulnerability in the event notification management module.](https://agentprime.io/advisories/CVE-2026-101176.md) `CVE-2026-101176` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.1 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-264 - [DoS vulnerability in the window module.](https://agentprime.io/advisories/CVE-2026-101186.md) `CVE-2026-101186` · CVE record: Huawei HarmonyOS · CVSS 7.5 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-19 - [OOB read vulnerability in the peripheral module.](https://agentprime.io/advisories/CVE-2026-101185.md) `CVE-2026-101185` · CVE record: Huawei HarmonyOS · CVSS 5.9 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption - [Use after free in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2026-101183.md) `CVE-2026-101183` · CVE record: Huawei HarmonyOS · CVSS 5.9 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption - [Race condition in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2026-101182.md) `CVE-2026-101182` · CVE record: Huawei HarmonyOS · CVSS 5.9 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Race condition - [Information disclosure in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2026-101181.md) `CVE-2026-101181` · CVE record: Huawei HarmonyOS · CVSS 5.5 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Information disclosure - [Uncontrolled recursion in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2026-101180.md) `CVE-2026-101180` · CVE record: Huawei HarmonyOS · CVSS 4.3 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Denial of service - [Buffer overflow vulnerability in the file preview module.](https://agentprime.io/advisories/CVE-2026-101179.md) `CVE-2026-101179` · CVE record: Huawei HarmonyOS · CVSS 4.7 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-19 - [Null pointer dereference vulnerability in the ArkWeb module.](https://agentprime.io/advisories/CVE-2026-101175.md) `CVE-2026-101175` · CVE record: Huawei HarmonyOS · CVSS 4.3 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-248 - [Permission control vulnerability in the background task management module.](https://agentprime.io/advisories/CVE-2026-101171.md) `CVE-2026-101171` · CVE record: Huawei HarmonyOS · CVSS 3.6 Low · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-264 - [DoS vulnerability in the file parsing module.](https://agentprime.io/advisories/CVE-2026-101170.md) `CVE-2026-101170` · CVE record: Huawei HarmonyOS · CVSS 4.0 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-115 - [Permission control vulnerability in the graphics module.](https://agentprime.io/advisories/CVE-2026-101172.md) `CVE-2026-101172` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-264 - [Out-of-bounds read in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2026-81645.md) `CVE-2026-81645` · CVE record: Huawei HarmonyOS · CVSS 5.9 Medium · Not analysed yet · Published 24 Sept 2026 · Tags: Memory corruption - [Permission control vulnerability in the app lock module.](https://agentprime.io/advisories/CVE-2026-49313.md) `CVE-2026-49313` · CVE record: Huawei HarmonyOS · CVSS 5.5 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-264 - [Permission control vulnerability in the Settings module.](https://agentprime.io/advisories/CVE-2026-49309.md) `CVE-2026-49309` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-264 - [Permission control vulnerability in the app management module.](https://agentprime.io/advisories/CVE-2026-41987.md) `CVE-2026-41987` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-264 - [DoS vulnerability in the input device module.](https://agentprime.io/advisories/CVE-2026-49315.md) `CVE-2026-49315` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.1 High · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-264 - [Out-of-bounds read vulnerability in the graphics module.](https://agentprime.io/advisories/CVE-2026-81647.md) `CVE-2026-81647` · CVE record: Huawei HarmonyOS · CVSS 5.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption - [Out-of-bounds read in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2026-81646.md) `CVE-2026-81646` · CVE record: Huawei HarmonyOS · CVSS 5.9 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption - [DoS vulnerability in the preview service module.](https://agentprime.io/advisories/CVE-2026-81644.md) `CVE-2026-81644` · CVE record: Huawei HarmonyOS · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-264 - [Permission control vulnerability in the window module.](https://agentprime.io/advisories/CVE-2026-49312.md) `CVE-2026-49312` · CVE record: Huawei HarmonyOS · CVSS 4.0 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-264 - [Permission control vulnerability in the event notification module.](https://agentprime.io/advisories/CVE-2026-49310.md) `CVE-2026-49310` · CVE record: Huawei HarmonyOS · CVSS 8.6 High · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-264 - [Out-of-bounds read in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2026-49314.md) `CVE-2026-49314` · CVE record: Huawei HarmonyOS · CVSS 7.3 High · Not analysed yet · Published 9 Sept 2026 · Tags: Memory corruption - [Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2026-49311.md) `CVE-2026-49311` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-275 - [Permission control vulnerability in the notification module.](https://agentprime.io/advisories/CVE-2026-49303.md) `CVE-2026-49303` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: CWE-264 - [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2026-49301.md) `CVE-2026-49301` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Information disclosure - [Improper handling of exceptional conditions in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2026-49305.md) `CVE-2026-49305` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: CWE-755 - [Permission control vulnerability in the clipboard module.](https://agentprime.io/advisories/CVE-2026-49308.md) `CVE-2026-49308` · CVE record: Huawei HarmonyOS · CVSS 5.5 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: CWE-264 - [Use after free in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2026-49306.md) `CVE-2026-49306` · CVE record: Huawei HarmonyOS · CVSS 3.3 Low · Not analysed yet · Published 17 Aug 2026 · Tags: Memory corruption - [Permission control vulnerability in the device key management module.](https://agentprime.io/advisories/CVE-2026-49304.md) `CVE-2026-49304` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: CWE-264 - [Information disclosure in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2026-49302.md) `CVE-2026-49302` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Information disclosure - [NULL pointer dereference in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2026-58561.md) `CVE-2026-58561` · CVE record: Huawei HarmonyOS · CVSS 4.0 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Memory corruption - [NULL pointer dereference in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2026-58560.md) `CVE-2026-58560` · CVE record: Huawei HarmonyOS · CVSS 4.0 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Memory corruption - [Information disclosure in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2026-49307.md) `CVE-2026-49307` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Information disclosure - [Design defect vulnerability in Expedition mode.](https://agentprime.io/advisories/CVE-2026-58557.md) `CVE-2026-58557` · CVE record: Huawei HarmonyOS · CVSS 4.8 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: CWE-701 - [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2026-58554.md) `CVE-2026-58554` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.6 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: Information disclosure - [Permission bypass vulnerability in the card module.](https://agentprime.io/advisories/CVE-2026-58555.md) `CVE-2026-58555` · CVE record: Huawei HarmonyOS · CVSS 6.6 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: CWE-264 - [Buffer overflow in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2026-58553.md) `CVE-2026-58553` · CVE record: Huawei HarmonyOS · CVSS 4.0 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: Memory corruption - [Buffer overflow in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2026-58552.md) `CVE-2026-58552` · CVE record: Huawei HarmonyOS · CVSS 5.1 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: Memory corruption - [Buffer overflow in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2026-58551.md) `CVE-2026-58551` · CVE record: Huawei HarmonyOS · CVSS 5.1 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: Memory corruption - [Buffer overflow in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2026-58550.md) `CVE-2026-58550` · CVE record: Huawei HarmonyOS · CVSS 4.0 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: Memory corruption - [Buffer overflow in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2026-58549.md) `CVE-2026-58549` · CVE record: Huawei HarmonyOS · CVSS 4.0 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: Memory corruption - [Use after free in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2026-41982.md) `CVE-2026-41982` · CVE record: Huawei HarmonyOS · CVSS 6.4 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption - [Heap-based buffer overflow in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2026-41981.md) `CVE-2026-41981` · CVE record: Huawei HarmonyOS · CVSS 5.3 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption - [Integer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2026-41977.md) `CVE-2026-41977` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.0 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Memory corruption - [Permission control vulnerability in the audio framework.](https://agentprime.io/advisories/CVE-2026-41976.md) `CVE-2026-41976` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.6 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-275 - [Permission control vulnerability in service notifications.](https://agentprime.io/advisories/CVE-2026-41974.md) `CVE-2026-41974` · CVE record: Huawei HarmonyOS and 1 more · CVSS 3.6 Low · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-264 - [Permission control vulnerability in calls.](https://agentprime.io/advisories/CVE-2026-41973.md) `CVE-2026-41973` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-840 - [Path traversal in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2026-41972.md) `CVE-2026-41972` · CVE record: Huawei HarmonyOS · CVSS 5.4 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Path traversal - [Logic bypass vulnerability in the file system.](https://agentprime.io/advisories/CVE-2026-41986.md) `CVE-2026-41986` · CVE record: Huawei HarmonyOS · CVSS 2.4 Low · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-606 - [Improper access control in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2026-41985.md) `CVE-2026-41985` · CVE record: Huawei HarmonyOS · CVSS 5.1 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Broken access control - [Improper access control in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2026-41984.md) `CVE-2026-41984` · CVE record: Huawei HarmonyOS · CVSS 5.2 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Broken access control - [Null pointer dereference vulnerability in the browser module.](https://agentprime.io/advisories/CVE-2026-41983.md) `CVE-2026-41983` · CVE record: Huawei HarmonyOS · CVSS 4.3 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-399 - [Information disclosure in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2026-41980.md) `CVE-2026-41980` · CVE record: Huawei HarmonyOS · CVSS 5.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Information disclosure - [Permission control vulnerability in the print module.](https://agentprime.io/advisories/CVE-2026-41979.md) `CVE-2026-41979` · CVE record: Huawei HarmonyOS · CVSS 5.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-701 Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .