HA
Product
HarmonyOS
by huawei · last CVE Sep 24, 2026
1,134
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 139High 361Medium 0Low 0
Watch

Add HarmonyOS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-46767
7.5
1%
Nov 8
Out-of-bounds write vulnerability in the kernel driver module
Affected: 4.0.0; 3.1.0; 3.0.0
CVE-2023-46766
7.5
1%
Nov 8
Out-of-bounds write vulnerability in the kernel driver module
Affected: 4.0.0; 3.1.0; 3.0.0
CVE-2023-46765
7.5
1%
Nov 8
Vulnerability of uncaught exceptions in the NFC module
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.1; 2.0.0
CVE-2023-46774
7.5
1%
Nov 8
Vulnerability of uncaught exceptions in the NFC module
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.1; 2.0.0
CVE-2023-46771
7.5
0%
Nov 8
Security vulnerability in the face unlock module
Affected: 4.0.0; 3.0.0; 2.0.0
CVE-2023-44098
7.5
0%
Nov 8
Vulnerability of missing encryption in the card management module
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.1
CVE-2023-44115
7.5
0%
Nov 8
Vulnerability of improper permission control in the Booster module
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.1; 2.0.0
CVE-2023-46770
7.5
1%
Nov 8
Out-of-bounds vulnerability in the sensor module
Affected: 4.0.0; 3.0.0; 2.0.0
CVE-2023-46769
7.5
1%
Nov 8
Use-After-Free (UAF) vulnerability in the dubai module
Affected: 4.0.0; 3.1.0; 3.0.0
CVE-2023-46768
7.5
1%
Nov 8
Multi-thread vulnerability in the idmap module
Affected: 4.0.0; 3.1.0; 3.0.0
CVE-2023-44108
7.5
0%
Oct 11
Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.1; 2.0.0
CVE-2023-44119
7.5
0%
Oct 11
Vulnerability of mutual exclusion management in the kernel module.Successful exploitation of this vulnerability will affect availability
Affected: 3.1.0; 3.0.0; 2.1.0; 2.0.1; 2.0.0
CVE-2023-44114
7.5
0%
Oct 11
Out-of-bounds array vulnerability in the dataipa module.Successful exploitation of this vulnerability may affect service confidentiality
Affected: 4.0.0; 3.1.0; 3.0.0
CVE-2023-44111
7.5
0%
Oct 11
Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.1; 2.0.0
CVE-2023-44104
7.5
0%
Oct 11
Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.1; 2.0.0
CVE-2023-44103
7.5
0%
Oct 11
Out-of-bounds read vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality
Affected: 4.0.0; 3.0.0; 2.1.0; 2.0.1; 2.0.0
CVE-2023-44101
7.5
0%
Oct 11
The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of this vulnerability may affect confidentiality
Affected: 4.0.0; 3.1.0; 2.1.0; 2.0.0
CVE-2023-44100
7.5
0%
Oct 11
Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality
Affected: 4.0.0; 3.1.0; 3.0.0; 2.0.1; 2.0.0
CVE-2023-44097
7.5
0%
Oct 11
Vulnerability of the permission to access device SNs being improperly managed.Successful exploitation of this vulnerability may affect service confidentiality
Affected: 3.0.0; 2.0.1
CVE-2023-44095
7.5
0%
Oct 11
Use-After-Free (UAF) vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause system crash
Affected: 3.1.0; 3.0.0; 2.0.1
CVE-2023-44109
7.5
0%
Oct 11
Clone vulnerability in the huks ta module.Successful exploitation of this vulnerability may affect service confidentiality
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.1; 2.0.0
CVE-2023-44096
7.5
0%
Oct 11
Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality
Affected: 3.1.0; 3.0.0; 2.1.0; 2.0.1; 2.0.0; 4.0.0
CVE-2023-44093
7.5
0%
Oct 11
Vulnerability of package names' public keys not being verified in the security module.Successful exploitation of this vulnerability may affect service confidentiality
Affected: 3.1.0; 3.0.0; 2.1.0; 2.0.1; 2.0.0
CVE-2022-48606
7.5
0%
Sep 26
Stability-related vulnerability in the binder background management and control module
Affected: 3.0.0; 2.1.0; 2.0.1; 2.0.0
CVE-2023-41309
7.5
1%
Sep 26
Permission control vulnerability in the MediaPlaybackController module
Affected: 4.0.0; 3.1.0; 3.0.0; 2.0.1; 2.0.0
CVE-2023-41308
7.5
1%
Sep 26
Screenshot vulnerability in the input module
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.1; 2.0.0
CVE-2023-41307
7.5
1%
Sep 26
Memory overwriting vulnerability in the security module
Affected: 3.0.0; 2.1.0; 2.0.0
CVE-2023-41305
7.5
0%
Sep 26
Vulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS message module
Affected: 4.0.0; 3.1.0; 3.0.0; 2.0.1; 2.0.0
CVE-2023-41303
7.5
1%
Sep 25
Command injection vulnerability in the distributed file system module
Affected: 3.1.0; 3.0.0; 2.1.0; 2.0.1; 2.0.0
CVE-2023-41293
7.5
0%
Sep 25
Data security classification vulnerability in the DDMP module
Affected: 4.0.0; 3.1.0; 3.0.0
CVE-2023-41302
7.5
1%
Sep 25
Redirection permission verification vulnerability in the home screen module
Affected: 4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.1; 2.0.0
CVE-2023-41301
7.5
0%
Sep 25
Vulnerability of unauthorized API access in the PMS module
Affected: 3.0.0; 2.1.0; 2.0.1; 2.0.0
CVE-2023-41300
7.5
0%
Sep 25
Vulnerability of parameters not being strictly verified in the PMS module
Affected: 4.0.0; 3.1.0; 3.0.0; 2.0.1; 2.0.0
CVE-2023-41299
7.5
0%
Sep 25
DoS vulnerability in the PMS module
Affected: 4.0.0; 3.1.0; 3.0.0
CVE-2023-41298
7.5
0%
Sep 25
Vulnerability of permission control in the window module
Affected: 4.0.0; 3.1.0; 3.0.0; 2.0.1
CVE-2023-39409
7.5
0%
Sep 25
DoS vulnerability in the PMS module
Affected: 4.0.0; 3.1.0; 3.0.0; 2.0.1; 2.0.0
CVE-2023-39408
7.5
0%
Sep 25
DoS vulnerability in the PMS module
Affected: 3.1.0; 3.0.0; 2.0.1; 2.0.0; 4.0.0
CVE-2023-39406
7.5
0%
Aug 13
Permission control vulnerability in the XLayout component
Affected: 3.0.0
CVE-2023-39404
7.5
0%
Aug 13
Vulnerability of input parameter verification in certain APIs in the window management module
Affected: 3.1.0; 3.0.0
CVE-2023-39397
7.5
0%
Aug 13
Input parameter verification vulnerability in the communication system
Affected: 3.1.0; 3.0.0; 2.0.1
CVE-2023-39395
7.5
0%
Aug 13
Mismatch vulnerability in the serialization process in the communication system
Affected: 3.1.0; 3.0.0; 2.0.0
CVE-2023-39394
7.5
0%
Aug 13
Vulnerability of API privilege escalation in the wifienhance module
Affected: 3.1.0; 3.0.0; 2.0.1
CVE-2023-39391
7.5
0%
Aug 13
Vulnerability of system file information leakage in the USB Service module
Affected: 3.1.0; 3.0.0; 2.0.1; 2.0.0
CVE-2023-39390
7.5
0%
Aug 13
Vulnerability of input parameter verification in certain APIs in the window management module
Affected: 3.1.0; 3.0.0
CVE-2023-39386
7.5
0%
Aug 13
Vulnerability of input parameters being not strictly verified in the PMS module
Affected: 3.1.0; 3.0.0
CVE-2023-39384
7.5
0%
Aug 13
Vulnerability of incomplete permission verification in the input method module
Affected: 3.1.0; 3.0.0; 2.1.0; 2.0.0; 2.0.1
CVE-2023-39383
7.5
0%
Aug 13
Vulnerability of input parameters being not strictly verified in the AMS module
Affected: 3.1.0; 3.0.0; 2.1.0; 2.0.0; 2.0.1
CVE-2023-39382
7.5
0%
Aug 13
Input verification vulnerability in the audio module
Affected: 3.1.0; 3.0.0; 2.1.0; 2.0.0; 2.0.1
CVE-2023-39381
7.5
0%
Aug 13
Input verification vulnerability in the storage module
Affected: 3.1.0; 3.0.0; 2.1.0; 2.0.0; 2.0.1
CVE-2023-39380
7.5
0%
Aug 13
Permission control vulnerability in the audio module
Affected: 3.1.0; 3.0.0
Page 5 of 8 · 361 total
1…456…8
The 500 most important CVEs for this product (exploited first, then by severity)