# Huawei HarmonyOS. Every CVE that names Huawei HarmonyOS among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52550.md) `CVE-2023-52550` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2024 · Tags: Memory corruption - [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52549.md) `CVE-2023-52549` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2024 · Tags: Memory corruption - [Insufficient verification of data authenticity in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52546.md) `CVE-2023-52546` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2024 · Tags: CWE-345 - [Incorrect default permissions in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52545.md) `CVE-2023-52545` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2024 · Tags: Broken access control - [Path traversal in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52544.md) `CVE-2023-52544` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 8 Apr 2024 · Tags: Path traversal - [Improper authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52359.md) `CVE-2023-52359` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2024 · Tags: Broken access control - [Improper privilege management in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52543.md) `CVE-2023-52543` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 8 Apr 2024 · Tags: Privilege escalation - [Permission verification vulnerability in the system module.](https://agentprime.io/advisories/CVE-2023-52542.md) `CVE-2023-52542` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2024 · Tags: CWE-281 - [Missing authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52541.md) `CVE-2023-52541` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2024 · Tags: Broken access control - [Improper authentication in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52540.md) `CVE-2023-52540` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2024 · Tags: Authentication bypass - [Improper authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52539.md) `CVE-2023-52539` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2024 · Tags: Broken access control - [Incorrect authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52538.md) `CVE-2023-52538` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Apr 2024 · Tags: Broken access control - [Improper access control in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52537.md) `CVE-2023-52537` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2024 · Tags: Broken access control, CWE-280 - [Incorrect permission assignment in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52388.md) `CVE-2023-52388` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2024 · Tags: Broken access control - [Incorrect default permissions in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52717.md) `CVE-2023-52717` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 7 Apr 2024 · Tags: Broken access control - [Improper privilege management in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52716.md) `CVE-2023-52716` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 7 Apr 2024 · Tags: Privilege escalation - [Incorrect permission assignment in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2023-52715.md) `CVE-2023-52715` · CVE record: Huawei HarmonyOS · CVSS 7.5 High · Not analysed yet · Published 7 Apr 2024 · Tags: Broken access control - [Vulnerability of defects introduced in the design process in the hwnff module.](https://agentprime.io/advisories/CVE-2023-52714.md) `CVE-2023-52714` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 7 Apr 2024 · Tags: CWE-657 - [Missing authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52713.md) `CVE-2023-52713` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.7 High · Not analysed yet · Published 7 Apr 2024 · Tags: Broken access control - [Improper access control in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-30418.md) `CVE-2024-30418` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 7 Apr 2024 · Tags: Broken access control, CWE-280 - [Path traversal in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-30417.md) `CVE-2024-30417` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 7 Apr 2024 · Tags: Path traversal - [Use after free in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-30416.md) `CVE-2024-30416` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 7 Apr 2024 · Tags: Memory corruption - [Incorrect default permissions in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-30415.md) `CVE-2024-30415` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Apr 2024 · Tags: Broken access control - [OS command injection in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-30414.md) `CVE-2024-30414` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 7 Apr 2024 · Tags: Command injection - [Incorrect permission assignment in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-30413.md) `CVE-2024-30413` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 7 Apr 2024 · Tags: Broken access control - [Missing authentication in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2022-48621.md) `CVE-2022-48621` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 18 Feb 2024 · Tags: Authentication bypass - [Code injection in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52381.md) `CVE-2023-52381` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Feb 2024 · Tags: Code injection - [Vulnerability of improper access control in the email module.Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2023-52380.md) `CVE-2023-52380` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 18 Feb 2024 - [Incorrect default permissions in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52379.md) `CVE-2023-52379` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 18 Feb 2024 · Tags: Broken access control - [Protection mechanism failure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52378.md) `CVE-2023-52378` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Feb 2024 · Tags: CWE-693 - [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52377.md) `CVE-2023-52377` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.4 High · Not analysed yet · Published 18 Feb 2024 · Tags: Memory corruption - [Information management vulnerability in the Gallery module.Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2023-52376.md) `CVE-2023-52376` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 18 Feb 2024 · Tags: CWE-212 - [Improper access control in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52375.md) `CVE-2023-52375` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 18 Feb 2024 · Tags: Broken access control - [Incorrect authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52374.md) `CVE-2023-52374` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 18 Feb 2024 · Tags: Broken access control - [Vulnerability of permission verification in the content sharing pop-up module.Successful exploitation of this vulnerability may cause unauthorized file sharing.](https://agentprime.io/advisories/CVE-2023-52373.md) `CVE-2023-52373` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 18 Feb 2024 · Tags: CWE-281 - [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52372.md) `CVE-2023-52372` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 18 Feb 2024 · Tags: CWE-20 - [NULL pointer dereference in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52371.md) `CVE-2023-52371` · CVE record: Huawei HarmonyOS and 1 more · CVSS 3.5 Low · Not analysed yet · Published 18 Feb 2024 · Tags: Memory corruption - [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52370.md) `CVE-2023-52370` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Feb 2024 · Tags: Memory corruption - [Out-of-bounds write in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52369.md) `CVE-2023-52369` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Feb 2024 · Tags: Memory corruption - [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52368.md) `CVE-2023-52368` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 18 Feb 2024 · Tags: CWE-20 - [Improper access control in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52367.md) `CVE-2023-52367` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.7 High · Not analysed yet · Published 18 Feb 2024 · Tags: Broken access control - [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52366.md) `CVE-2023-52366` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 18 Feb 2024 · Tags: Memory corruption - [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52365.md) `CVE-2023-52365` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.7 High · Not analysed yet · Published 18 Feb 2024 · Tags: Memory corruption - [Vulnerability of defects introduced in the design process in the Control Panel module.Successful exploitation of this vulnerability may cause app processes to be started by mistake.](https://agentprime.io/advisories/CVE-2023-52363.md) `CVE-2023-52363` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 18 Feb 2024 - [Incorrect default permissions in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52362.md) `CVE-2023-52362` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 18 Feb 2024 · Tags: Broken access control - [Incorrect authorization in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2023-52361.md) `CVE-2023-52361` · CVE record: Huawei HarmonyOS · CVSS 7.5 High · Not analysed yet · Published 18 Feb 2024 · Tags: Broken access control - [Logic vulnerabilities in the baseband.Successful exploitation of this vulnerability may affect service integrity.](https://agentprime.io/advisories/CVE-2023-52360.md) `CVE-2023-52360` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 18 Feb 2024 · Tags: CWE-511 - [Vulnerability of configuration defects in some APIs of the audio module.Successful exploitation of this vulnerability may affect availability.](https://agentprime.io/advisories/CVE-2023-52358.md) `CVE-2023-52358` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 18 Feb 2024 - [Deserialization of untrusted data in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52357.md) `CVE-2023-52357` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 18 Feb 2024 · Tags: Insecure deserialization - [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52097.md) `CVE-2023-52097` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 18 Feb 2024 · Tags: Information disclosure - [Resource reuse vulnerability in the GPU module.](https://agentprime.io/advisories/CVE-2023-52387.md) `CVE-2023-52387` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 18 Feb 2024 · Tags: CWE-664 - [Vulnerability of permission verification for APIs in the DownloadProviderMain module.](https://agentprime.io/advisories/CVE-2023-52106.md) `CVE-2023-52106` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.4 Medium · Not analysed yet · Published 16 Jan 2024 · Tags: CWE-264 - [Improper privilege management in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2023-52105.md) `CVE-2023-52105` · CVE record: Huawei HarmonyOS · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2024 · Tags: Privilege escalation, Broken access control - [Vulnerability of parameters being not verified in the WMS module.](https://agentprime.io/advisories/CVE-2023-52104.md) `CVE-2023-52104` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2024 - [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52103.md) `CVE-2023-52103` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jan 2024 · Tags: Memory corruption - [Improper output encoding in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52102.md) `CVE-2023-52102` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2024 · Tags: CWE-116 - [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52101.md) `CVE-2023-52101` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jan 2024 · Tags: Information disclosure - [The Celia Keyboard module has a vulnerability in access control.](https://agentprime.io/advisories/CVE-2023-52100.md) `CVE-2023-52100` · CVE record: Huawei HarmonyOS · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2024 - [Improper access control in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52099.md) `CVE-2023-52099` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2024 · Tags: Broken access control - [Uncontrolled resource consumption in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52098.md) `CVE-2023-52098` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 16 Jan 2024 · Tags: Denial of service, CWE-116 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .