HUAWEI HarmonyOS

• CVE-2026-28543 Medium 4.4 Race condition vulnerability in the maintenance and diagnostics module. Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
• CVE-2026-28541 Medium 4.0 Permission control vulnerability in the cellular_data module. Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
• CVE-2026-28540 Medium 4.0 Out-of-bounds character read vulnerability in Bluetooth. Impact: Successful exploitation of this vulnerability may affect service confidentiality. <0.1%
• CVE-2026-28539 Medium 6.2 Data processing vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. <0.1%
• CVE-2026-28538 Medium 5.9 Path traversal vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
• CVE-2025-66319 Low 3.3 Permission control vulnerability in the resource scheduling module. Impact: Successful exploitation of this vulnerability may affect service integrity. 0.1%
• CVE-2026-28552 Medium 6.5 Out-of-bounds write vulnerability in the IMS module. Impact: Successful exploitation of this vulnerability may affect availability. 0.3%
• CVE-2026-28550 Medium 4.0 Race condition vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
• CVE-2026-28545 Medium 5.9 Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
• CVE-2026-28544 Medium 6.2 Race condition vulnerability in the printing module. Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
• CVE-2026-28537 Medium 5.1 Double free vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
• CVE-2026-28536 Critical 9.6 Authentication bypass vulnerability in the device authentication module. Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality. 0.2%
• CVE-2026-24928 Medium 5.8 Out-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2026-24927 Medium 5.5 Out-of-bounds access vulnerability in the frequency modulation module. Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2026-24924 Medium 6.1 Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2026-24920 Medium 6.2 Permission control vulnerability in the AMS module. Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2026-24919 Medium 6.0 Out-of-bounds write vulnerability in the DFX module. Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2026-24917 Medium 6.5 UAF vulnerability in the security module. Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2026-24916 Medium 5.9 Identity authentication bypass vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2026-24931 Medium 5.9 Vulnerability of improper criterion security check in the card module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2026-24930 High 8.4 UAF concurrency vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
• CVE-2026-24929 Medium 5.9 Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
• CVE-2026-24923 Medium 6.3 Permission control vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2026-24922 Medium 6.9 Buffer overflow vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2026-24921 Medium 4.8 Address read vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. <0.1%
• CVE-2026-24918 Medium 6.8 Address read vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2026-24915 Medium 6.2 Out-of-bounds read issue in the media subsystem. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. 0.1%
• CVE-2026-24914 Medium 4.0 Type confusion vulnerability in the camera module. Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2026-24926 High 8.4 Out-of-bounds write vulnerability in the camera module. Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2026-24925 High 7.3 Heap-based buffer overflow vulnerability in the image module. Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
• CVE-2025-68959 Medium 6.2 Permission verification bypass vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. <0.1%
• CVE-2025-68970 Medium 6.1 Permission verification bypass vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. <0.1%
• CVE-2025-68963 Medium 5.7 Man-in-the-middle attack vulnerability in the Clone module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2025-68967 Medium 5.7 Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. 0.1%
• CVE-2025-68966 Medium 5.1 Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. <0.1%
• CVE-2025-68965 Medium 4.7 Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. <0.1%
• CVE-2025-68964 Medium 6.2 Data verification vulnerability in the HiView module. Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2025-68969 Medium 6.8 Multi-thread race condition vulnerability in the thermal management module. Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
• CVE-2025-68968 High 7.8 Double free vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect the input function. <0.1%
• CVE-2025-68962 Medium 5.1 Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
• CVE-2025-68961 Medium 5.1 Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
• CVE-2025-68960 High 8.4 Multi-thread race condition vulnerability in the video framework module. Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
• CVE-2025-68958 High 8.0 Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2025-68957 High 8.4 Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2025-68956 High 8.0 Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2025-68955 High 8.0 Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability. 0.1%
• CVE-2025-66330 Medium 4.9 App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerability may affect service confidentiality. <0.1%
• CVE-2025-66329 Medium 4.0 Permission control vulnerability in the window management module. Impact: Successful exploitation of this vulnerability may affect availability. <0.1%
• CVE-2025-66325 Medium 6.2 Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. <0.1%
• CVE-2025-58279 Medium 4.4 Permission control vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. <0.1%