Advisories · Technology

Huawei HarmonyOS.

Every CVE that names Huawei HarmonyOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-52108 CVE record

CVSS 7.5 High

Vulnerability of process priorities being raised in the ActivityManagerService module.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 16 Jan 2024
CVE-2023-52107 CVE record

CVSS 7.5 High

Improper privilege management in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Privilege escalation
Not analysed yet 16 Jan 2024
CVE-2023-52116 CVE record

CVSS 7.5 High

Improper privilege management in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Privilege escalation
Not analysed yet 16 Jan 2024
CVE-2023-52115 CVE record

CVSS 7.5 High

Use after free in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 16 Jan 2024
CVE-2023-52114 CVE record

CVSS 7.5 High

Improper privilege management in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Privilege escalation
- Broken access control
Not analysed yet 16 Jan 2024
CVE-2023-44112 CVE record

CVSS 7.5 High

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 16 Jan 2024
CVE-2023-52113 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Denial of service
Not analysed yet 16 Jan 2024
CVE-2023-52112 CVE record

CVSS 5.3 Medium

Files accessible to external parties in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 16 Jan 2024
CVE-2023-52111 CVE record

CVSS 7.5 High

Improper authentication in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 16 Jan 2024
CVE-2023-52110 CVE record

CVSS 7.5 High

Out-of-bounds write in Huawei HarmonyOS
- Huawei HarmonyOS
- Memory corruption
Not analysed yet 16 Jan 2024
CVE-2023-52109 CVE record

CVSS 7.5 High

Insufficient verification of data authenticity in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-345
Not analysed yet 16 Jan 2024
CVE-2023-44117 CVE record

CVSS 7.5 High

Authentication bypass by spoofing in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 16 Jan 2024
CVE-2023-4566 CVE record

CVSS 7.5 High

Authentication bypass by spoofing in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 16 Jan 2024
CVE-2023-6273 CVE record

CVSS 5.3 Medium

Incorrect default permissions in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 6 Dec 2023
CVE-2023-49240 CVE record

Open redirect in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Open redirect
Not analysed yet 6 Dec 2023
CVE-2023-49239 CVE record

Unauthorized access vulnerability in the card management module.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 6 Dec 2023
CVE-2023-49246 CVE record

CVSS 7.5 High

Incorrect authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 6 Dec 2023
CVE-2023-49245 CVE record

Unauthorized access vulnerability in the Huawei Share module.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 6 Dec 2023
CVE-2023-49244 CVE record

Permission management vulnerability in the multi-user module.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 6 Dec 2023
CVE-2023-49243 CVE record

Vulnerability of unauthorized access to email attachments in the email module.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 6 Dec 2023
CVE-2023-49242 CVE record

Free broadcast vulnerability in the running management module.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 6 Dec 2023
CVE-2023-49241 CVE record

API permission control vulnerability in the network management module.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 6 Dec 2023
CVE-2023-44113 CVE record

CVSS 7.5 High

Missing authorization in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 6 Dec 2023
CVE-2023-44099 CVE record

Improper check for unusual conditions in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-754
Not analysed yet 6 Dec 2023
CVE-2023-49248 CVE record

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 6 Dec 2023
CVE-2023-49247 CVE record

Improper certificate validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Weak cryptography or TLS
Not analysed yet 6 Dec 2023
CVE-2023-46773 CVE record

Permission management vulnerability in the PMS module.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 6 Dec 2023
CVE-2023-46759 CVE record

Improper access control in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 8 Nov 2023
CVE-2023-46758 CVE record

Improper privilege management in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Privilege escalation
Not analysed yet 8 Nov 2023
CVE-2023-46757 CVE record

Information disclosure in Huawei HarmonyOS
- Huawei HarmonyOS
- Information disclosure
Not analysed yet 8 Nov 2023
CVE-2023-46756 CVE record

Improper privilege management in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Privilege escalation
Not analysed yet 8 Nov 2023
CVE-2023-46755 CVE record

CVSS 5.3 Medium

Improper access control in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 8 Nov 2023
CVE-2023-46764 CVE record

Unauthorized startup vulnerability of background apps.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-15
Not analysed yet 8 Nov 2023
CVE-2023-46763 CVE record

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 8 Nov 2023
CVE-2023-46762 CVE record

CVSS 7.5 High

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 8 Nov 2023
CVE-2023-46761 CVE record

Out-of-bounds write in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 8 Nov 2023
CVE-2023-46760 CVE record

CVSS 7.5 High

Out-of-bounds write in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 8 Nov 2023
CVE-2023-46767 CVE record

CVSS 7.5 High

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 8 Nov 2023
CVE-2023-46766 CVE record

CVSS 7.5 High

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 8 Nov 2023
CVE-2023-46765 CVE record

CVSS 7.5 High

Improper check for unusual conditions in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-754
Not analysed yet 8 Nov 2023
CVE-2023-46774 CVE record

CVSS 7.5 High

Vulnerability of uncaught exceptions in the NFC module.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 8 Nov 2023
CVE-2022-48613 CVE record

Race condition in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Race condition
Not analysed yet 8 Nov 2023
CVE-2023-46771 CVE record

CVSS 7.5 High

Improper privilege management in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Privilege escalation
Not analysed yet 8 Nov 2023
CVE-2023-44098 CVE record

CVSS 7.5 High

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 8 Nov 2023
CVE-2023-44115 CVE record

CVSS 7.5 High

Information disclosure in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Information disclosure
Not analysed yet 8 Nov 2023
CVE-2023-46770 CVE record

CVSS 7.5 High

Out-of-bounds vulnerability in the sensor module.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 8 Nov 2023
CVE-2023-46769 CVE record

Use after free in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 8 Nov 2023
CVE-2023-46768 CVE record

Use after free in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 8 Nov 2023
CVE-2023-5801 CVE record

Authentication bypass by spoofing in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 8 Nov 2023
CVE-2023-44108 CVE record

CVSS 7.5 High

Type confusion in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 11 Oct 2023
CVE-2023-44107 CVE record

Vulnerability of defects introduced in the design process in the screen projection module.Successful exploitation of this vulnerability may affect service availability and integrity.
- Huawei HarmonyOS
Not analysed yet 11 Oct 2023
CVE-2023-44105 CVE record

Improper privilege management in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Privilege escalation
Not analysed yet 11 Oct 2023
CVE-2023-44119 CVE record

Vulnerability of mutual exclusion management in the kernel module.Successful exploitation of this vulnerability will affect availability.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-667
Not analysed yet 11 Oct 2023
CVE-2023-44118 CVE record

Improper access control in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Broken access control
Not analysed yet 11 Oct 2023
CVE-2023-44116 CVE record

Missing authentication in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Authentication bypass
Not analysed yet 11 Oct 2023
CVE-2023-44114 CVE record

Out-of-bounds read in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Memory corruption
Not analysed yet 11 Oct 2023
CVE-2023-44111 CVE record

Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- Huawei EMUI
Not analysed yet 11 Oct 2023
CVE-2023-44110 CVE record

Improper input validation in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-20
Not analysed yet 11 Oct 2023
CVE-2023-41304 CVE record

Improper check for unusual conditions in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- CWE-754
Not analysed yet 11 Oct 2023
CVE-2023-44106 CVE record

Improper privilege management in Huawei HarmonyOS and others
- Huawei HarmonyOS
- Huawei EMUI
- Privilege escalation
Not analysed yet 11 Oct 2023