CVE-2026-24916

Identity Authentication Bypass in HarmonyOS Window Module

Identity authentication bypass vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-24919

Out‑of‑Bounds Write in Huawei DFX Module Leading to Availability Impact

Out-of-bounds write vulnerability in the DFX module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 6 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Emui Harmonyos

CVE-2026-24924

Improper Permission Control in HarmonyOS Print Module

Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-24927

Out-of-Bounds Access in Frequency Modulation Module Leading to Availability Impact

Out-of-bounds access vulnerability in the frequency modulation module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Emui Harmonyos

CVE-2026-34866

Out‑of‑Bounds Write in HarmonyOS WEB Module Leads to Availability and Confidentiality Impact

Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

CVSS 3.1 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-34865

HarmonyOS Web Module Out-of-Bounds Write Vulnerability

Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

CVSS 4.0 · 10 Critical EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-34855

Kernel Module Out‑Bounds Write Leading to Availability and Confidentiality Issues

Out-of-bounds write vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

CVSS 3.1 · 5.7 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Emui Harmonyos

CVE-2026-34867

Double‑Free Vulnerability in HarmonyOS Multi‑Mode Input System

Double free vulnerability in the multi-mode input system. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 5.6 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-28542

Permission bypass allowing availability disruption on Huawei devices

Permission bypass vulnerability in the system service framework. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Emui Harmonyos

CVE-2026-28537

Double free in HarmonyOS window module may cause denial of service

Double free vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-28550

Race Condition in HarmonyOS Security Control Module Leading to Availability Impact

Race condition vulnerability in the security control module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-28552

IMS Module Out‑of‑Bounds Write Causing Availability Disruption

Out-of-bounds write vulnerability in the IMS module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Emui Harmonyos

CVE-2026-28538

Path Traversal in HarmonyOS Certificate Management Leading to Availability Issues

Path traversal vulnerability in the certificate management module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-28540

Out‑of‑Bounds Character Read in Bluetooth on Huawei HarmonyOS

Out-of-bounds character read vulnerability in Bluetooth. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-28541

Permission control flaw in HarmonyOS cellular_data module may affect device connectivity

Permission control vulnerability in the cellular_data module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-28543

Race Condition in HarmonyOS Diagnostics Module Causes Availability Issues

Race condition vulnerability in the maintenance and diagnostics module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-28546

Buffer Overflow in HarmonyOS Scanning Module Causing Availability Issues

Buffer overflow vulnerability in the scanning module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-28547

Uninitialized Pointer Access in HarmonyOS Scanning Module Leading to Availability Impact

Vulnerability of uninitialized pointer access in the scanning module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-28551

Race Condition in HarmonyOS Device Security Management Leads to Availability Impact

Race condition vulnerability in the device security management module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS 3.1 · 4.7 Medium EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Harmonyos

CVE-2026-28548

Email Application Verification Failure in Huawei EMUI/HarmonyOS Enables Data Exposure

Vulnerability of improper verification in the email application. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Huawei

Products

Emui Harmonyos