CVE Database and Vulnerability Search
Search CVE and GHSA vulnerability records by identifier, title, vendor, product, package, or CWE. Filter by severity, CISA KEV, ransomware association, linked artifacts, and Nuclei templates; sort by publication date, CVSS, or EPSS.
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-58559MEDIUM | Generated title:Huawei EMUI and Harmony OS Vibration Service Denial of ServiceDoS vulnerability in the vibration service. Impact: Successful exploitation of this vulnerability may affect availability. CWE-789Jul 15, 2026 | CVSS6.5v3.1 | EPSS0.142% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-58558HIGH | Generated title:Huawei EMUI and Harmony OS File System Permission Control VulnerabilityPermission control vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-840Jul 15, 2026 | CVSS7.8v3.1 | EPSS0.084% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-58556MEDIUM | Generated title:Huawei EMUI and Harmony OS Bluetooth Module Permission Control VulnerabilityPermission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability. CWE-264Jul 15, 2026 | CVSS5.1v3.1 | EPSS0.08% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-58554MEDIUM | Generated title:Huawei EMUI and HarmonyOS Settings Module Permission Control VulnerabilityPermission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-200Jul 15, 2026 | CVSS6.6v3.1 | EPSS0.077% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-41977MEDIUM | Generated title:Huawei EMUI and HarmonyOS Log Service Denial of ServiceDoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affect availability. CWE-190Jun 9, 2026 | CVSS5.0v3.1 | EPSS0.075% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-41976MEDIUM | Generated title:Huawei EMUI and HarmonyOS Audio Framework Permission Control VulnerabilityPermission control vulnerability in the audio framework. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-275Jun 9, 2026 | CVSS6.6v3.1 | EPSS0.079% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
Generated title:Huawei EMUI and HarmonyOS Service Notifications Permission Control VulnerabilityPermission control vulnerability in service notifications. Impact: Successful exploitation of this vulnerability may affect availability. CWE-264Jun 9, 2026 | CVSS3.6v3.1 | EPSS0.074% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
CVE-2026-41973MEDIUM | Generated title:Huawei EMUI and HarmonyOS Permission Control Vulnerability in CallsPermission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability. CWE-840Jun 9, 2026 | CVSS5.9v3.1 | EPSS0.078% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-41970MEDIUM | Generated title:Huawei EMUI Distributed File System Out-of-Bounds Write VulnerabilityOut-of-bounds write vulnerability in the distributed file system module. Impact: Successful exploitation of this vulnerability may affect availability. CWE-787May 15, 2026 | CVSS6.8v3.1 | EPSS0.131% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-41969MEDIUM | Generated title:Huawei EMUI and HarmonyOS Projection Module Permission Control VulnerabilityPermission control vulnerability in the projection module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-275May 15, 2026 | CVSS6.2v3.1 | EPSS0.096% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-41960MEDIUM | Generated title:Huawei EMUI and HarmonyOS Permission Control VulnerabilityPermission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability. CWE-200May 15, 2026 | CVSS5.8v3.1 | EPSS0.09% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-34859MEDIUM | Generated title:Huawei EMUI and HarmonyOS Kernel Use-After-Free VulnerabilityUAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. CWE-416Apr 13, 2026 | CVSS5.9v3.1 | EPSS0.077% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-34855MEDIUM | Generated title:Huawei EMUI and HarmonyOS Kernel Out-of-Bounds Write VulnerabilityOut-of-bounds write vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. CWE-20Apr 13, 2026 | CVSS5.7v3.1 | EPSS0.11% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-34854MEDIUM | Generated title:Huawei EMUI and HarmonyOS Kernel Use-After-Free VulnerabilityUAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. CWE-416Apr 13, 2026 | CVSS5.7v3.1 | EPSS0.099% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-34853HIGH | Generated title:Huawei EMUI and HarmonyOS LBS Module Permission Bypass VulnerabilityPermission bypass vulnerability in the LBS module. Impact: Successful exploitation of this vulnerability may affect availability. CWE-270Apr 13, 2026 | CVSS7.7v3.1 | EPSS0.169% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-28553MEDIUM | Generated title:Huawei EMUI and HarmonyOS Theme Setting Improper Permission Control VulnerabilityVulnerability of improper permission control in the theme setting module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-275Apr 13, 2026 | CVSS6.9v3.1 | EPSS0.139% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-28542HIGH | Generated title:Huawei EMUI and HarmonyOS System Service Framework Permission Bypass VulnerabilityPermission bypass vulnerability in the system service framework. Impact: Successful exploitation of this vulnerability may affect availability. CWE-755Mar 5, 2026 | CVSS7.3v3.1 | EPSS0.078% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-28548HIGH | Generated title:Huawei EMUI and HarmonyOS Improper Verification Vulnerability in Email ApplicationVulnerability of improper verification in the email application. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-269Mar 5, 2026 | CVSS7.1v3.1 | EPSS0.07% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-28552MEDIUM | Generated title:Huawei EMUI and HarmonyOS IMS Module Out-of-Bounds Write VulnerabilityOut-of-bounds write vulnerability in the IMS module. Impact: Successful exploitation of this vulnerability may affect availability. | CVSS6.5v3.1 | EPSS0.281% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-24928MEDIUM | Generated title:Huawei EMUI and HarmonyOS File System Module Out-of-Bounds Write VulnerabilityOut-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | CVSS5.8v3.1 | EPSS0.094% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-24927MEDIUM | Generated title:Huawei EMUI and HarmonyOS Frequency Modulation Out-of-Bounds Access VulnerabilityOut-of-bounds access vulnerability in the frequency modulation module. Impact: Successful exploitation of this vulnerability may affect availability. CWE-416Feb 6, 2026 | CVSS5.5v3.1 | EPSS0.101% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-24920MEDIUM | Generated title:Huawei EMUI and HarmonyOS AMS Module Permission Control VulnerabilityPermission control vulnerability in the AMS module. Impact: Successful exploitation of this vulnerability may affect availability. CWE-264Feb 6, 2026 | CVSS6.2v3.1 | EPSS0.103% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-24919MEDIUM | Generated title:Huawei EMUI and HarmonyOS DFX Module Out-of-Bounds Write VulnerabilityOut-of-bounds write vulnerability in the DFX module. Impact: Successful exploitation of this vulnerability may affect availability. CWE-787Feb 6, 2026 | CVSS6.0v3.1 | EPSS0.105% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-24917MEDIUM | Generated title:Huawei EMUI and HarmonyOS Security Module Use-After-Free VulnerabilityUAF vulnerability in the security module. Impact: Successful exploitation of this vulnerability may affect availability. CWE-416Feb 6, 2026 | CVSS6.5v3.1 | EPSS0.093% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-24918MEDIUM | Generated title:Huawei EMUI and HarmonyOS Communication Module NULL Pointer Dereference VulnerabilityAddress read vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability. CWE-476Feb 6, 2026 | CVSS6.8v3.1 | EPSS0.115% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |