Huawei vulnerabilities and threats

290 threats

Severity	CVSS	Signals	Threat	Source	Published
Low	3.6	EPSS <0.1%	CVE-2026-41974Huawei HarmonyOS · Permissions, Privileges, and Access Controls Low3.6EPSS <0.1%2026-06-09CVE Database V5CVE-2026-41974 CVE-2026-41974 is a permission control vulnerability in the service notifications component of Huawei HarmonyOS. Exploitation of this vulnerability may impact system availability. The vulnerability has a low severity rating and a CVSS score of 3.6. It affects multiple versions of HarmonyOS including 4.0.0, 4.2.0, 4.3.0, and 4.3.1. No official patch or remediation guidance has been provided by the vendor as of the published date. EPSS <0.1%Vulnerability CWE-264	CVE Database V5	2026-06-09
Medium	5.9	EPSS <0.1%	CVE-2026-41973Huawei HarmonyOS · Business Logic Errors Medium5.9EPSS <0.1%2026-06-09CVE Database V5CVE-2026-41973 CVE-2026-41973 is a permission control vulnerability in Huawei HarmonyOS related to business logic errors (CWE-840). Successful exploitation may impact system availability. The vulnerability has a medium severity with a CVSS score of 5.9. It affects multiple versions of HarmonyOS including 4.0.0, 4.2.0, 4.3.0, and 4.3.1. No official patch or remediation guidance is currently available from the vendor. EPSS <0.1%Vulnerability CWE-840	CVE Database V5	2026-06-09
Medium	5.4	EPSS 0.2%	CVE-2026-41972Huawei HarmonyOS · Path Traversal Medium5.4EPSS 0.2%2026-06-09CVE Database V5CVE-2026-41972 Path traversal vulnerability in the SMS app. Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.2%Vulnerability CWE-22	CVE Database V5	2026-06-09
Low	2.4	EPSS 0.1%	CVE-2026-41986Huawei HarmonyOS · Unchecked Input for Loop Condition Low2.4EPSS 0.1%2026-06-09CVE Database V5CVE-2026-41986 Logic bypass vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.1%Vulnerability CWE-606	CVE Database V5	2026-06-09
Medium	5.1	EPSS <0.1%	CVE-2026-41985Huawei HarmonyOS · Improper Access Control Medium5.1EPSS <0.1%2026-06-09CVE Database V5CVE-2026-41985 CVE-2026-41985 is a use-after-free (UAF) vulnerability in the package management module of Huawei HarmonyOS version 6.1.0. It involves improper access control (CWE-284) and may impact service integrity if exploited. The vulnerability requires high privileges and user interaction, with a medium severity score of 5.1. No official patch or remediation guidance is currently available. EPSS <0.1%Vulnerability CWE-284	CVE Database V5	2026-06-09
Medium	5.2	EPSS <0.1%	CVE-2026-41984Huawei HarmonyOS · Improper Access Control Medium5.2EPSS <0.1%2026-06-09CVE Database V5CVE-2026-41984 CVE-2026-41984 is a use-after-free (UAF) vulnerability in the package management module of Huawei HarmonyOS version 6.1.0. It involves improper access control (CWE-284) that may impact service integrity if successfully exploited. The vulnerability has a medium severity with a CVSS score of 5.2. No official patch or remediation guidance is currently provided by the vendor. EPSS <0.1%Vulnerability CWE-284	CVE Database V5	2026-06-09
Medium	4.3	EPSS 0.1%	CVE-2026-41983Huawei HarmonyOS · Resource Management Errors Medium4.3EPSS 0.1%2026-06-09CVE Database V5CVE-2026-41983 Null pointer dereference vulnerability in the browser module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.1%Vulnerability CWE-399 #ghsa-767p-cppf-v3v3	CVE Database V5	2026-06-09
Medium	5.5	EPSS <0.1%	CVE-2026-41980Huawei HarmonyOS · Information Exposure Medium5.5EPSS <0.1%2026-06-09CVE Database V5CVE-2026-41980 Permission control vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. EPSS <0.1%Vulnerability CWE-200	CVE Database V5	2026-06-09
Medium	5.5	EPSS <0.1%	CVE-2026-41979Huawei HarmonyOS · Weaknesses Introduced During Design Medium5.5EPSS <0.1%2026-06-09CVE Database V5CVE-2026-41979 Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect integrity and confidentiality. EPSS <0.1%Vulnerability CWE-701	CVE Database V5	2026-06-09
Medium	4.4	EPSS <0.1%	CVE-2026-41978Huawei HarmonyOS · Permission Issues Medium4.4EPSS <0.1%2026-06-09CVE Database V5CVE-2026-41978 Permission control vulnerability in the clone module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. EPSS <0.1%Vulnerability CWE-275	CVE Database V5	2026-06-09
Medium	6.3	EPSS <0.1%	CVE-2026-41975Huawei HarmonyOS · Weaknesses Introduced During Design Medium6.3EPSS <0.1%2026-06-09CVE Database V5CVE-2026-41975 Permission management vulnerability in the network management module. Impact: Successful exploitation of this vulnerability may affect service integrity. EPSS <0.1%Vulnerability CWE-701	CVE Database V5	2026-06-09
Medium	6.8	EPSS 0.1%	CVE-2026-41970Huawei HarmonyOS · Out-of-bounds Write Medium6.8EPSS 0.1%2026-05-15CVE Database V5CVE-2026-41970 Out-of-bounds write vulnerability in the distributed file system module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS 0.1%Vulnerability CWE-787	CVE Database V5	2026-05-15
Medium	6.2	EPSS <0.1%	CVE-2026-41969Huawei HarmonyOS · Permission Issues Medium6.2EPSS <0.1%2026-05-15CVE Database V5CVE-2026-41969 Permission control vulnerability in the projection module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. EPSS <0.1%Vulnerability CWE-275	CVE Database V5	2026-05-15
Medium	5.9	EPSS <0.1%	CVE-2026-41968Huawei HarmonyOS · Business Logic Errors Medium5.9EPSS <0.1%2026-05-15CVE Database V5CVE-2026-41968 Permission control vulnerability in the manufacturability design module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS <0.1%Vulnerability CWE-840	CVE Database V5	2026-05-15
Medium	5.9	EPSS <0.1%	CVE-2026-41967Huawei HarmonyOS · Business Logic Errors Medium5.9EPSS <0.1%2026-05-15CVE Database V5CVE-2026-41967 Permission control vulnerability in the manufacturability design module. Impact: Successful exploitation of this vulnerability may affect availability. EPSS <0.1%Vulnerability CWE-840	CVE Database V5	2026-05-15
Medium	5.6	EPSS 0.1%	CVE-2026-41966Huawei HarmonyOS · Business Logic Errors Medium5.6EPSS 0.1%2026-05-15CVE Database V5CVE-2026-41966 Permission control vulnerability in the smart sensing service. Impact: Successful exploitation of this vulnerability may affect service confidentiality. EPSS 0.1%Vulnerability CWE-840	CVE Database V5	2026-05-15
Low	3.6	EPSS <0.1%	CVE-2026-41962Huawei HarmonyOS · Permissions, Privileges, and Access Controls Low3.6EPSS <0.1%2026-05-15CVE Database V5CVE-2026-41962 Permission control vulnerability in the app management and control module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. EPSS <0.1%Vulnerability CWE-264	CVE Database V5	2026-05-15
Medium	5.9	EPSS <0.1%	CVE-2026-41961Huawei HarmonyOS · Business Logic Errors Medium5.9EPSS <0.1%2026-05-15CVE Database V5CVE-2026-41961 Permission control vulnerability in contacts. Impact: Successful exploitation of this vulnerability may affect availability. EPSS <0.1%Vulnerability CWE-840	CVE Database V5	2026-05-15
Medium	5.8	EPSS <0.1%	CVE-2026-41960Huawei HarmonyOS · Information Exposure Medium5.8EPSS <0.1%2026-05-15CVE Database V5CVE-2026-41960 Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability. EPSS <0.1%Vulnerability CWE-200	CVE Database V5	2026-05-15
Medium	5.5	EPSS <0.1%	CVE-2026-41971Huawei HarmonyOS · Business Logic Errors Medium5.5EPSS <0.1%2026-05-15CVE Database V5CVE-2026-41971 Permission control vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. EPSS <0.1%Vulnerability CWE-840	CVE Database V5	2026-05-15

Page 3 of 15