HUAWEI HarmonyOS

• CVE-2023-52109 High 7.5 Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2023-44117 High 7.5 Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality. 0.3%
• CVE-2023-4566 High 7.5 Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality. 0.3%
• CVE-2023-6273 Medium 5.3 Permission management vulnerability in the module for disabling Sound Booster. Successful exploitation of this vulnerability may cause features to perform abnormally. 0.4%
• CVE-2023-49240 Unrated Unauthorized access vulnerability in the launcher module. Successful exploitation of this vulnerability may affect service confidentiality. 0.4%
• CVE-2023-49239 Unrated Unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affect service confidentiality. 0.4%
• CVE-2023-49246 High 7.5 Unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affect service confidentiality. 0.4%
• CVE-2023-49245 Unrated Unauthorized access vulnerability in the Huawei Share module. Successful exploitation of this vulnerability may affect service confidentiality. 0.4%
• CVE-2023-49244 Unrated Permission management vulnerability in the multi-user module. Successful exploitation of this vulnerability may affect service confidentiality. 0.4%
• CVE-2023-49243 Unrated Vulnerability of unauthorized access to email attachments in the email module. Successful exploitation of this vulnerability may affect service confidentiality. 0.4%
• CVE-2023-49242 Unrated Free broadcast vulnerability in the running management module. Successful exploitation of this vulnerability may affect service confidentiality. 0.4%
• CVE-2023-49241 Unrated API permission control vulnerability in the network management module. Successful exploitation of this vulnerability may affect service confidentiality. 0.4%
• CVE-2023-44113 High 7.5 Vulnerability of missing permission verification for APIs in the Designed for Reliability (DFR) module. Successful exploitation of this vulnerability may affect service confidentiality. 0.4%
• CVE-2023-44099 Unrated Vulnerability of data verification errors in the kernel module. Successful exploitation of this vulnerability may cause WLAN interruption. 0.5%
• CVE-2023-49248 Unrated Vulnerability of unauthorized file access in the Settings app. Successful exploitation of this vulnerability may cause unauthorized file access. 0.2%
• CVE-2023-49247 Unrated Permission verification vulnerability in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality. 0.4%
• CVE-2023-46773 Unrated Permission management vulnerability in the PMS module. Successful exploitation of this vulnerability may cause privilege escalation. 0.5%
• CVE-2023-46759 Unrated Permission control vulnerability in the call module. Successful exploitation of this vulnerability may affect service confidentiality. 0.5%
• CVE-2023-46758 Unrated Permission management vulnerability in the multi-screen interaction module. Successful exploitation of this vulnerability may cause service exceptions of the device. 0.6%
• CVE-2023-46757 Unrated The remote PIN module has a vulnerability that causes incorrect information storage locations.Successful exploitation of this vulnerability may affect confidentiality. 0.4%
• CVE-2023-46756 Unrated Permission control vulnerability in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows. 0.4%
• CVE-2023-46755 Medium 5.3 Vulnerability of input parameters being not strictly verified in the input. Successful exploitation of this vulnerability may cause the launcher to restart. 0.5%
• CVE-2023-46764 Unrated Unauthorized startup vulnerability of background apps. Successful exploitation of this vulnerability may cause background apps to start maliciously. 0.4%
• CVE-2023-46763 Unrated Vulnerability of background app permission management in the framework module. Successful exploitation of this vulnerability may cause background apps to start maliciously. 0.4%
• CVE-2023-46762 High 7.5 Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions. 0.6%
• CVE-2023-46761 Unrated Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions. 0.6%
• CVE-2023-46760 High 7.5 Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions. 0.6%
• CVE-2023-46767 High 7.5 Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions. 0.6%
• CVE-2023-46766 High 7.5 Out-of-bounds write vulnerability in the kernel driver module. Successful exploitation of this vulnerability may cause process exceptions. 0.6%
• CVE-2023-46765 High 7.5 Vulnerability of uncaught exceptions in the NFC module. Successful exploitation of this vulnerability can affect NFC availability. 0.6%
• CVE-2023-46774 High 7.5 Vulnerability of uncaught exceptions in the NFC module. Successful exploitation of this vulnerability can affect NFC availability. 0.6%
• CVE-2022-48613 Unrated Race condition vulnerability in the kernel module. Successful exploitation of this vulnerability may cause variable values to be read with the condition evaluation bypassed. 0.4%
• CVE-2023-46771 High 7.5 Security vulnerability in the face unlock module. Successful exploitation of this vulnerability may affect service confidentiality. 0.5%
• CVE-2023-44098 High 7.5 Vulnerability of missing encryption in the card management module. Successful exploitation of this vulnerability may affect service confidentiality. 0.2%
• CVE-2023-44115 High 7.5 Vulnerability of improper permission control in the Booster module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.5%
• CVE-2023-46770 High 7.5 Out-of-bounds vulnerability in the sensor module. Successful exploitation of this vulnerability may cause mistouch prevention errors on users' mobile phones. 0.6%
• CVE-2023-46769 Unrated Use-After-Free (UAF) vulnerability in the dubai module. Successful exploitation of this vulnerability will affect availability. 0.6%
• CVE-2023-46768 Unrated Multi-thread vulnerability in the idmap module. Successful exploitation of this vulnerability may cause features to perform abnormally. 0.6%
• CVE-2023-5801 Unrated Vulnerability of identity verification being bypassed in the face unlock module. Successful exploitation of this vulnerability will affect integrity and confidentiality. 0.5%
• CVE-2023-44108 High 7.5 Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart. 0.5%
• CVE-2023-44107 Unrated Vulnerability of defects introduced in the design process in the screen projection module.Successful exploitation of this vulnerability may affect service availability and integrity. 0.5%
• CVE-2023-44105 Unrated Vulnerability of permissions not being strictly verified in the window management module.Successful exploitation of this vulnerability may cause features to perform abnormally. 0.5%
• CVE-2023-44119 Unrated Vulnerability of mutual exclusion management in the kernel module.Successful exploitation of this vulnerability will affect availability. 0.4%
• CVE-2023-44118 Unrated Vulnerability of undefined permissions in the MeeTime module.Successful exploitation of this vulnerability will affect availability and confidentiality. 0.5%
• CVE-2023-44116 Unrated Vulnerability of access permissions not being strictly verified in the APPWidget module.Successful exploitation of this vulnerability may cause some apps to run without being authorized. 0.4%
• CVE-2023-44114 Unrated Out-of-bounds array vulnerability in the dataipa module.Successful exploitation of this vulnerability may affect service confidentiality. 0.4%
• CVE-2023-44111 Unrated Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality. 0.4%
• CVE-2023-44110 Unrated Out-of-bounds access vulnerability in the audio module.Successful exploitation of this vulnerability may affect availability. 0.2%
• CVE-2023-41304 Unrated Parameter verification vulnerability in the window module.Successful exploitation of this vulnerability may cause the size of an app window to be adjusted to that of a floating window. 0.3%
• CVE-2023-44106 Unrated API permission management vulnerability in the Fwk-Display module.Successful exploitation of this vulnerability may cause features to perform abnormally. 0.5%