Huawei Vulnerabilities and Affected Products
Vulnerabilities associated with EMUI.
Products
Clear product- HarmonyOS1,089 vulnerabilities
- EMUI756 vulnerabilities
- Magic UI200 vulnerabilities
- NIP680019 vulnerabilities
- Secospace USG660015 vulnerabilities
- USG950012 vulnerabilities
- IPS Module11 vulnerabilities
- NGFW Module11 vulnerabilities
- Secospace USG630011 vulnerabilities
- Secospace USG650011 vulnerabilities
- HUAWEI Mate 2010 vulnerabilities
- NIP630010 vulnerabilities
- NIP660010 vulnerabilities
- Harmony OS8 vulnerabilities
- HUAWEI P30 Pro7 vulnerabilities
- USG6000V7 vulnerabilities
- HUAWEI Mate 20 Pro6 vulnerabilities
- HUAWEI P306 vulnerabilities
- PCManager6 vulnerabilities
- CloudEngine 128005 vulnerabilities
- CloudEngine 58005 vulnerabilities
- CloudEngine 68005 vulnerabilities
- CloudEngine 78005 vulnerabilities
- CurieM-WFG9B5 vulnerabilities
- Emily-L29C5 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-58559MEDIUM | Generated title:Huawei EMUI and Harmony OS Vibration Service Denial of ServiceDoS vulnerability in the vibration service. Impact: Successful exploitation of this vulnerability may affect availability. CWE-789Jul 15, 2026 | CVSS6.5v3.1 | EPSS0.142% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-58558HIGH | Generated title:Huawei EMUI and Harmony OS File System Permission Control VulnerabilityPermission control vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-840Jul 15, 2026 | CVSS7.8v3.1 | EPSS0.084% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-58556MEDIUM | Generated title:Huawei EMUI and Harmony OS Bluetooth Module Permission Control VulnerabilityPermission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability. CWE-264Jul 15, 2026 | CVSS5.1v3.1 | EPSS0.08% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-58554MEDIUM | Generated title:Huawei EMUI and HarmonyOS Settings Module Permission Control VulnerabilityPermission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-200Jul 15, 2026 | CVSS6.6v3.1 | EPSS0.077% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-41977MEDIUM | Generated title:Huawei EMUI and HarmonyOS Log Service Denial of ServiceDoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affect availability. CWE-190Jun 9, 2026 | CVSS5.0v3.1 | EPSS0.075% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-41976MEDIUM | Generated title:Huawei EMUI and HarmonyOS Audio Framework Permission Control VulnerabilityPermission control vulnerability in the audio framework. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-275Jun 9, 2026 | CVSS6.6v3.1 | EPSS0.079% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
Generated title:Huawei EMUI and HarmonyOS Service Notifications Permission Control VulnerabilityPermission control vulnerability in service notifications. Impact: Successful exploitation of this vulnerability may affect availability. CWE-264Jun 9, 2026 | CVSS3.6v3.1 | EPSS0.074% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
CVE-2026-41973MEDIUM | Generated title:Huawei EMUI and HarmonyOS Permission Control Vulnerability in CallsPermission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability. CWE-840Jun 9, 2026 | CVSS5.9v3.1 | EPSS0.078% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-41970MEDIUM | Generated title:Huawei EMUI Distributed File System Out-of-Bounds Write VulnerabilityOut-of-bounds write vulnerability in the distributed file system module. Impact: Successful exploitation of this vulnerability may affect availability. CWE-787May 15, 2026 | CVSS6.8v3.1 | EPSS0.131% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-41969MEDIUM | Generated title:Huawei EMUI and HarmonyOS Projection Module Permission Control VulnerabilityPermission control vulnerability in the projection module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-275May 15, 2026 | CVSS6.2v3.1 | EPSS0.096% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-41960MEDIUM | Generated title:Huawei EMUI and HarmonyOS Permission Control VulnerabilityPermission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability. CWE-200May 15, 2026 | CVSS5.8v3.1 | EPSS0.09% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-34859MEDIUM | Generated title:Huawei EMUI and HarmonyOS Kernel Use-After-Free VulnerabilityUAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. CWE-416Apr 13, 2026 | CVSS5.9v3.1 | EPSS0.077% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-34855MEDIUM | Generated title:Huawei EMUI and HarmonyOS Kernel Out-of-Bounds Write VulnerabilityOut-of-bounds write vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. CWE-20Apr 13, 2026 | CVSS5.7v3.1 | EPSS0.11% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-34854MEDIUM | Generated title:Huawei EMUI and HarmonyOS Kernel Use-After-Free VulnerabilityUAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. CWE-416Apr 13, 2026 | CVSS5.7v3.1 | EPSS0.099% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-34853HIGH | Generated title:Huawei EMUI and HarmonyOS LBS Module Permission Bypass VulnerabilityPermission bypass vulnerability in the LBS module. Impact: Successful exploitation of this vulnerability may affect availability. CWE-270Apr 13, 2026 | CVSS7.7v3.1 | EPSS0.169% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-28553MEDIUM | Generated title:Huawei EMUI and HarmonyOS Theme Setting Improper Permission Control VulnerabilityVulnerability of improper permission control in the theme setting module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-275Apr 13, 2026 | CVSS6.9v3.1 | EPSS0.139% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-28542HIGH | Generated title:Huawei EMUI and HarmonyOS System Service Framework Permission Bypass VulnerabilityPermission bypass vulnerability in the system service framework. Impact: Successful exploitation of this vulnerability may affect availability. CWE-755Mar 5, 2026 | CVSS7.3v3.1 | EPSS0.078% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-28548HIGH | Generated title:Huawei EMUI and HarmonyOS Improper Verification Vulnerability in Email ApplicationVulnerability of improper verification in the email application. Impact: Successful exploitation of this vulnerability may affect service confidentiality. CWE-269Mar 5, 2026 | CVSS7.1v3.1 | EPSS0.07% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-28552MEDIUM | Generated title:Huawei EMUI and HarmonyOS IMS Module Out-of-Bounds Write VulnerabilityOut-of-bounds write vulnerability in the IMS module. Impact: Successful exploitation of this vulnerability may affect availability. | CVSS6.5v3.1 | EPSS0.281% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-24928MEDIUM | Generated title:Huawei EMUI and HarmonyOS File System Module Out-of-Bounds Write VulnerabilityOut-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | CVSS5.8v3.1 | EPSS0.094% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-24927MEDIUM | Generated title:Huawei EMUI and HarmonyOS Frequency Modulation Out-of-Bounds Access VulnerabilityOut-of-bounds access vulnerability in the frequency modulation module. Impact: Successful exploitation of this vulnerability may affect availability. CWE-416Feb 6, 2026 | CVSS5.5v3.1 | EPSS0.101% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-24920MEDIUM | Generated title:Huawei EMUI and HarmonyOS AMS Module Permission Control VulnerabilityPermission control vulnerability in the AMS module. Impact: Successful exploitation of this vulnerability may affect availability. CWE-264Feb 6, 2026 | CVSS6.2v3.1 | EPSS0.103% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-24919MEDIUM | Generated title:Huawei EMUI and HarmonyOS DFX Module Out-of-Bounds Write VulnerabilityOut-of-bounds write vulnerability in the DFX module. Impact: Successful exploitation of this vulnerability may affect availability. CWE-787Feb 6, 2026 | CVSS6.0v3.1 | EPSS0.105% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-24917MEDIUM | Generated title:Huawei EMUI and HarmonyOS Security Module Use-After-Free VulnerabilityUAF vulnerability in the security module. Impact: Successful exploitation of this vulnerability may affect availability. CWE-416Feb 6, 2026 | CVSS6.5v3.1 | EPSS0.093% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-24918MEDIUM | Generated title:Huawei EMUI and HarmonyOS Communication Module NULL Pointer Dereference VulnerabilityAddress read vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability. CWE-476Feb 6, 2026 | CVSS6.8v3.1 | EPSS0.115% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |