CVE-2023-52378

CRITICAL

Huawei EMUI and HarmonyOS - Incorrect Service Logic in WindowManagerServices

Title source: llm
STIX 2.1

Description

Vulnerability of incorrect service logic in the WindowManagerServices module.Successful exploitation of this vulnerability may cause features to perform abnormally.

Scores

CVSS v3 9.8
EPSS 0.0012
EPSS Percentile 30.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-693
Status published
Products (3)
huawei/emui 13.0.0
huawei/harmonyos 3.0.0
huawei/harmonyos 3.1.0
Published Feb 18, 2024
Tracked Since Feb 18, 2026