OOpenHarmony

Products

Exploited and recent CVEs

• CVE-2026-33565 Low 3.3 kernel_linux_common_modules has a Race Condition vulnerability <0.1%
• CVE-2026-28733 Medium 6.5 filemanagement_storage_service has an use after free vulnerability 0.1%
• CVE-2026-27766 Medium 5.5 multimedia_audio_framework has a Race Condition vulnerability 0.1%
• CVE-2026-25850 Medium 5.5 filemanagement_storage_service has an improper preservation of permissions vulnerability 0.1%
• CVE-2026-25781 High 8.4 kernel_liteos_a has an out-of-bounds write vulnerability 0.1%
• CVE-2026-28751 Low 3.3 filemanagement_storage_service has an improper input validation vulnerability 0.1%
• CVE-2026-27781 Low 3.3 kernel_liteos_a has an integer overflow vulnerability 0.1%
• CVE-2026-27648 High 8.8 web_webview has an out-of-bounds write vulnerability 0.6%
• CVE-2026-25110 Low 3.3 Sensors_medical_sensor has a NULL pointer dereference vulnerability 0.1%
• CVE-2026-24792 High 8.1 web_webview has a Race Condition vulnerability 0.4%
• CVE-2025-6969 Medium 5.0 ability_ability_runtime an improper input validation vulnerability 0.2%
• CVE-2025-26474 Low 3.3 communication_ipc an improper input validation vulnerability 0.1%
• CVE-2025-52458 Medium 5.5 arkcompiler_ets_runtime has an out-of-bounds write vulnerability 0.2%
• CVE-2025-41432 Medium 5.5 arkcompiler_ets_runtime has an out-of-bounds write vulnerability 0.2%
• CVE-2025-25277 Medium 6.3 arkcompiler_ets_runtime has a type confusion vulnerability 0.2%
• CVE-2025-12736 Medium 6.5 multimedia_audio_standard has an insecure storage of sensitive information vulnerability 0.2%
• CVE-2026-0639 Low 3.3 liteos_a has a missing release of memory vulnerability 0.2%
• CVE-2025-27562 Low 3.3 communication_dsoftbus has a missing release of memory vulnerability 0.1%
• CVE-2025-27128 High 8.4 liteos_a has an UAF vulnerability 0.2%
• CVE-2025-25212 Low 3.3 pasteboard has an improper input vulnerability 0.1%
• CVE-2025-24844 Low 3.3 communication_dsoftbus has a missing release of memory vulnerability 0.1%
• CVE-2025-27536 Low 3.3 arkcompiler_ets_runtime has a type confusion vulnerability 0.1%
• CVE-2025-26690 Low 3.3 communication dsoftbus has a NULL pointer vulnerability 0.1%
• CVE-2025-24925 Low 3.3 applications_settings has a missing release of memory vulnerability 0.1%
• CVE-2025-24298 High 8.4 liteos_a has an UAF vulnerability 0.2%
• CVE-2025-25278 High 8.4 liteos_a has a race condition vulnerability 0.1%
• CVE-2025-27577 High 8.4 liteos_a has a race condition vulnerability 0.1%
• CVE-2025-27247 Medium 5.5 Pasteboard has an improper preservation of permissions vulnerability 0.1%
• CVE-2025-27242 Low 3.3 Ssecurity_component_manager has an improper input vulnerability 0.1%
• CVE-2025-27563 Low 3.3 security_access_token has an improper preservation of permissions vulnerability 0.1%