HUAWEI HarmonyOS

• CVE-2024-30417 High 7.5 Path traversal vulnerability in the Bluetooth-based sharing module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.4%
• CVE-2024-30416 High 7.5 Use After Free (UAF) vulnerability in the underlying driver module. Impact: Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2024-30415 Critical 9.1 Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2024-30414 High 7.5 Command injection vulnerability in the AccountManager module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.7%
• CVE-2024-30413 High 7.5 Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2022-48621 Medium 6.3 Vulnerability of missing authentication for critical functions in the Wi-Fi module.Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2023-52381 Critical 9.8 Script injection vulnerability in the email module.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability. 0.4%
• CVE-2023-52380 Medium 4.3 Vulnerability of improper access control in the email module.Successful exploitation of this vulnerability may affect service confidentiality. 0.3%
• CVE-2023-52379 High 7.5 Permission control vulnerability in the calendarProvider module.Successful exploitation of this vulnerability may affect service confidentiality. 0.3%
• CVE-2023-52378 Critical 9.8 Vulnerability of incorrect service logic in the WindowManagerServices module.Successful exploitation of this vulnerability may cause features to perform abnormally. 0.5%
• CVE-2023-52377 High 7.4 Vulnerability of input data not being verified in the cellular data module.Successful exploitation of this vulnerability may cause out-of-bounds access. 0.4%
• CVE-2023-52376 High 7.5 Information management vulnerability in the Gallery module.Successful exploitation of this vulnerability may affect service confidentiality. 0.3%
• CVE-2023-52375 Medium 5.5 Permission control vulnerability in the WindowManagerServices module.Successful exploitation of this vulnerability may affect availability. 0.2%
• CVE-2023-52374 High 7.5 Permission control vulnerability in the package management module.Successful exploitation of this vulnerability may affect service confidentiality. 0.3%
• CVE-2023-52373 High 7.5 Vulnerability of permission verification in the content sharing pop-up module.Successful exploitation of this vulnerability may cause unauthorized file sharing. 0.3%
• CVE-2023-52372 High 7.5 Vulnerability of input parameter verification in the motor module.Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2023-52371 Low 3.5 Vulnerability of null references in the motor module.Successful exploitation of this vulnerability may affect availability. 0.2%
• CVE-2023-52370 Critical 9.8 Stack overflow vulnerability in the network acceleration module.Successful exploitation of this vulnerability may cause unauthorized file access. 0.5%
• CVE-2023-52369 Critical 9.1 Stack overflow vulnerability in the NFC module.Successful exploitation of this vulnerability may affect service availability and integrity. 0.4%
• CVE-2023-52368 Medium 5.3 Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally. 0.3%
• CVE-2023-52367 High 7.7 Vulnerability of improper access control in the media library module.Successful exploitation of this vulnerability may affect service availability and integrity. 0.1%
• CVE-2023-52366 High 7.5 Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally. 0.4%
• CVE-2023-52365 High 7.7 Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally. 0.3%
• CVE-2023-52363 Medium 6.3 Vulnerability of defects introduced in the design process in the Control Panel module.Successful exploitation of this vulnerability may cause app processes to be started by mistake. 0.2%
• CVE-2023-52362 High 7.5 Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2023-52361 High 7.5 The VerifiedBoot module has a vulnerability that may cause authentication errors.Successful exploitation of this vulnerability may affect integrity. 0.3%
• CVE-2023-52360 High 7.5 Logic vulnerabilities in the baseband.Successful exploitation of this vulnerability may affect service integrity. 0.3%
• CVE-2023-52358 Medium 6.2 Vulnerability of configuration defects in some APIs of the audio module.Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2023-52357 Medium 6.2 Vulnerability of serialization/deserialization mismatch in the vibration framework.Successful exploitation of this vulnerability may affect availability. 0.3%
• CVE-2023-52097 High 7.5 Vulnerability of foreground service restrictions being bypassed in the NMS module.Successful exploitation of this vulnerability may affect service confidentiality. 0.3%
• CVE-2023-52387 High 7.5 Resource reuse vulnerability in the GPU module. Successful exploitation of this vulnerability may affect service confidentiality. 0.3%
• CVE-2023-52106 Medium 4.4 Vulnerability of permission verification for APIs in the DownloadProviderMain module. Impact: Successful exploitation of this vulnerability will affect integrity and availability. 0.3%
• CVE-2023-52105 High 7.5 The nearby module has a privilege escalation vulnerability. Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2023-52104 High 7.5 Vulnerability of parameters being not verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality. 0.3%
• CVE-2023-52103 Critical 9.8 Buffer overflow vulnerability in the FLP module. Successful exploitation of this vulnerability may cause out-of-bounds read. 0.5%
• CVE-2023-52102 High 7.5 Vulnerability of parameters being not verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality. 0.3%
• CVE-2023-52101 Critical 9.1 Component exposure vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service availability and integrity. 0.4%
• CVE-2023-52100 High 7.5 The Celia Keyboard module has a vulnerability in access control. Successful exploitation of this vulnerability may affect availability. 0.4%
• CVE-2023-52099 High 7.5 Vulnerability of foreground service restrictions being bypassed in the NMS module. Successful exploitation of this vulnerability may affect service confidentiality. 0.3%
• CVE-2023-52098 High 7.5 Denial of Service (DoS) vulnerability in the DMS module. Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2023-52108 High 7.5 Vulnerability of process priorities being raised in the ActivityManagerService module. Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2023-52107 High 7.5 Vulnerability of permissions being not strictly verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality. 0.3%
• CVE-2023-52116 High 7.5 Permission management vulnerability in the multi-screen interaction module. Successful exploitation of this vulnerability may cause service exceptions of the device. 0.4%
• CVE-2023-52115 High 7.5 The iaware module has a Use-After-Free (UAF) vulnerability. Successful exploitation of this vulnerability may affect the system functions. 0.4%
• CVE-2023-52114 High 7.5 Data confidentiality vulnerability in the ScreenReader module. Successful exploitation of this vulnerability may affect service integrity. 0.3%
• CVE-2023-44112 High 7.5 Out-of-bounds access vulnerability in the device authentication module. Successful exploitation of this vulnerability may affect confidentiality. 0.4%
• CVE-2023-52113 High 7.5 launchAnyWhere vulnerability in the ActivityManagerService module. Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2023-52112 Medium 5.3 Unauthorized file access vulnerability in the wallpaper service module. Successful exploitation of this vulnerability may cause features to perform abnormally. 0.3%
• CVE-2023-52111 High 7.5 Authorization vulnerability in the BootLoader module. Successful exploitation of this vulnerability may affect service integrity. 0.3%
• CVE-2023-52110 High 7.5 The sensor module has an out-of-bounds access vulnerability.Successful exploitation of this vulnerability may affect availability. 0.4%