# Huawei HarmonyOS. Every CVE that names Huawei HarmonyOS among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Access permission verification vulnerability in the ringtone setting module Impact: Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2024-45449.md) `CVE-2024-45449` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 4 Sept 2024 · Tags: CWE-264 - [Page table protection configuration vulnerability in the trusted firmware module Impact: Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2024-45448.md) `CVE-2024-45448` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.1 Medium · Not analysed yet · Published 4 Sept 2024 · Tags: CWE-1259 - [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-45447.md) `CVE-2024-45447` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.4 Medium · Not analysed yet · Published 4 Sept 2024 · Tags: Information disclosure - [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-45446.md) `CVE-2024-45446` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 4 Sept 2024 · Tags: CWE-20 - [Incomplete cleanup in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-45445.md) `CVE-2024-45445` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.0 Medium · Not analysed yet · Published 4 Sept 2024 · Tags: CWE-459 - [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-45444.md) `CVE-2024-45444` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 4 Sept 2024 · Tags: CWE-20 - [Path traversal in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-45443.md) `CVE-2024-45443` · CVE record: Huawei HarmonyOS · CVSS 6.1 Medium · Not analysed yet · Published 4 Sept 2024 · Tags: Path traversal - [Vulnerability of permission verification for APIs in the DownloadProviderMain module Impact: Successful exploitation of this vulnerability will affect availability.](https://agentprime.io/advisories/CVE-2024-45442.md) `CVE-2024-45442` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 4 Sept 2024 · Tags: CWE-264 - [Improper input validation in huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-45441.md) `CVE-2024-45441` · CVE record: huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 4 Sept 2024 · Tags: CWE-20 - [Improper authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-42039.md) `CVE-2024-42039` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 4 Sept 2024 · Tags: Broken access control - [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-45450.md) `CVE-2024-45450` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.0 Medium · Not analysed yet · Published 4 Sept 2024 · Tags: Information disclosure - [Improper authentication in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-42038.md) `CVE-2024-42038` · CVE record: Huawei HarmonyOS and 1 more · CVSS 8.8 High · Not analysed yet · Published 8 Aug 2024 · Tags: Authentication bypass - [Vulnerability of uncaught exceptions in the Graphics module Impact: Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2024-42037.md) `CVE-2024-42037` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Aug 2024 · Tags: CWE-248 - [Improper authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-42036.md) `CVE-2024-42036` · CVE record: Huawei HarmonyOS and 1 more · CVSS 2.5 Low · Not analysed yet · Published 8 Aug 2024 · Tags: Broken access control - [Missing authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-42035.md) `CVE-2024-42035` · CVE record: Huawei HarmonyOS and 1 more · CVSS 8.4 High · Not analysed yet · Published 8 Aug 2024 · Tags: Broken access control - [LaunchAnywhere vulnerability in the account module.](https://agentprime.io/advisories/CVE-2024-42034.md) `CVE-2024-42034` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.6 Medium · Not analysed yet · Published 8 Aug 2024 · Tags: CWE-840 - [Improper access control in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-42033.md) `CVE-2024-42033` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 8 Aug 2024 · Tags: Broken access control - [Improper authorization in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-42032.md) `CVE-2024-42032` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.4 Medium · Not analysed yet · Published 8 Aug 2024 · Tags: Broken access control - [Access permission verification vulnerability in the Settings module.](https://agentprime.io/advisories/CVE-2024-42031.md) `CVE-2024-42031` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 8 Aug 2024 · Tags: CWE-16 - [Access permission verification vulnerability in the content sharing pop-up module Impact: Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2024-42030.md) `CVE-2024-42030` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 8 Aug 2024 · Tags: CWE-701 - [Permission verification vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect availability](https://agentprime.io/advisories/CVE-2023-7265.md) `CVE-2023-7265` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.0 Medium · Not analysed yet · Published 8 Aug 2024 · Tags: CWE-264 - [Use after free in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-39672.md) `CVE-2024-39672` · CVE record: Huawei HarmonyOS and 1 more · CVSS 8.4 High · Not analysed yet · Published 25 Jul 2024 · Tags: Memory corruption - [Access control vulnerability in the security verification module.](https://agentprime.io/advisories/CVE-2024-39671.md) `CVE-2024-39671` · CVE record: Huawei HarmonyOS and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Jul 2024 · Tags: CWE-840 - [Privilege escalation vulnerability in the NMS module Impact: Successful exploitation of this vulnerability will affect availability.](https://agentprime.io/advisories/CVE-2023-7271.md) `CVE-2023-7271` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 25 Jul 2024 · Tags: CWE-840 - [Privilege escalation vulnerability in the account synchronisation module.](https://agentprime.io/advisories/CVE-2024-39670.md) `CVE-2024-39670` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 25 Jul 2024 · Tags: CWE-264 - [Cleartext storage of sensitive information in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-39674.md) `CVE-2024-39674` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 25 Jul 2024 · Tags: Information disclosure - [Deserialization of untrusted data in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-39673.md) `CVE-2024-39673` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 25 Jul 2024 · Tags: Insecure deserialization - [Function vulnerabilities in the Calendar module Impact: Successful exploitation of this vulnerability will affect availability.](https://agentprime.io/advisories/CVE-2024-5465.md) `CVE-2024-5465` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 14 Jun 2024 · Tags: CWE-264 - [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-5464.md) `CVE-2024-5464` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.0 Medium · Not analysed yet · Published 14 Jun 2024 · Tags: Information disclosure - [Use of uninitialized resource in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-36503.md) `CVE-2024-36503` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.3 High · Not analysed yet · Published 14 Jun 2024 · Tags: Memory corruption - [Out-of-bounds read in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-36502.md) `CVE-2024-36502` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.9 High · Not analysed yet · Published 14 Jun 2024 · Tags: Memory corruption - [Out-of-bounds write in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-36501.md) `CVE-2024-36501` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.6 Medium · Not analysed yet · Published 14 Jun 2024 · Tags: Memory corruption - [Improper privilege management in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-36500.md) `CVE-2024-36500` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.8 High · Not analysed yet · Published 14 Jun 2024 · Tags: Privilege escalation - [Improper privilege management in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-36499.md) `CVE-2024-36499` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 14 Jun 2024 · Tags: Privilege escalation - [The WindowManager module has a vulnerability in permission control.](https://agentprime.io/advisories/CVE-2023-52721.md) `CVE-2023-52721` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 11 May 2024 · Tags: CWE-264 - [Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability.](https://agentprime.io/advisories/CVE-2024-4046.md) `CVE-2024-4046` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.4 Medium · Not analysed yet · Published 11 May 2024 · Tags: CWE-840 - [Cracking vulnerability in the OS security module Impact: Successful exploitation of this vulnerability will affect availability.](https://agentprime.io/advisories/CVE-2024-32999.md) `CVE-2024-32999` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 11 May 2024 · Tags: CWE-840 - [Uninitialized pointer access in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-32998.md) `CVE-2024-32998` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 11 May 2024 · Tags: Memory corruption - [Race condition in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52720.md) `CVE-2023-52720` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.1 Medium · Not analysed yet · Published 11 May 2024 · Tags: Race condition - [Race condition in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-32997.md) `CVE-2024-32997` · CVE record: Huawei HarmonyOS and 1 more · CVSS 8.4 High · Not analysed yet · Published 11 May 2024 · Tags: Race condition - [Privilege escalation vulnerability in the account module Impact: Successful exploitation of this vulnerability will affect availability.](https://agentprime.io/advisories/CVE-2024-32996.md) `CVE-2024-32996` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 11 May 2024 · Tags: CWE-264 - [Denial of service (DoS) vulnerability in the AMS module Impact: Successful exploitation of this vulnerability will affect availability.](https://agentprime.io/advisories/CVE-2024-32995.md) `CVE-2024-32995` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 11 May 2024 · Tags: CWE-248 - [Privilege escalation vulnerability in the PMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2023-52719.md) `CVE-2023-52719` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.1 High · Not analysed yet · Published 11 May 2024 · Tags: CWE-16 - [Race condition in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-32993.md) `CVE-2024-32993` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.6 Medium · Not analysed yet · Published 11 May 2024 · Tags: Race condition - [Double free in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52384.md) `CVE-2023-52384` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.7 Medium · Not analysed yet · Published 11 May 2024 · Tags: Memory corruption - [Double free in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52383.md) `CVE-2023-52383` · CVE record: Huawei HarmonyOS and 1 more · CVSS 4.7 Medium · Not analysed yet · Published 11 May 2024 · Tags: Memory corruption - [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-32992.md) `CVE-2024-32992` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 11 May 2024 · Tags: CWE-20 - [Permission verification vulnerability in the wpa_supplicant module Impact: Successful exploitation of this vulnerability will affect availability.](https://agentprime.io/advisories/CVE-2024-32991.md) `CVE-2024-32991` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 11 May 2024 · Tags: CWE-16 - [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-32990.md) `CVE-2024-32990` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.1 Medium · Not analysed yet · Published 11 May 2024 · Tags: CWE-20 - [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-32989.md) `CVE-2024-32989` · CVE record: Huawei HarmonyOS and 1 more · CVSS 3.3 Low · Not analysed yet · Published 11 May 2024 · Tags: CWE-20 - [Information disclosure in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-27897.md) `CVE-2024-27897` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2024 · Tags: Information disclosure - [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2024-27896.md) `CVE-2024-27896` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2024 · Tags: CWE-20 - [Improper access control in Huawei HarmonyOS](https://agentprime.io/advisories/CVE-2024-27895.md) `CVE-2024-27895` · CVE record: Huawei HarmonyOS · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2024 · Tags: Broken access control - [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52364.md) `CVE-2023-52364` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 8 Apr 2024 · Tags: Memory corruption - [Out-of-bounds write in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52386.md) `CVE-2023-52386` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2024 · Tags: Memory corruption - [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52385.md) `CVE-2023-52385` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 8 Apr 2024 · Tags: CWE-20 - [Incorrect permission assignment in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52554.md) `CVE-2023-52554` · CVE record: Huawei HarmonyOS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2024 · Tags: Broken access control - [Race condition in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52553.md) `CVE-2023-52553` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.4 High · Not analysed yet · Published 8 Apr 2024 · Tags: Race condition - [Improper input validation in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52552.md) `CVE-2023-52552` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2024 · Tags: CWE-20 - [Buffer overflow in Huawei HarmonyOS and others](https://agentprime.io/advisories/CVE-2023-52551.md) `CVE-2023-52551` · CVE record: Huawei HarmonyOS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 8 Apr 2024 · Tags: Memory corruption Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .