VulnSea

HarmonyOS vulnerabilities

CVEs whose affected-version data names the HarmonyOS package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

63 CVEsRSS

CVE-2025-58305Medium· 6.2
11mo ago

Identity authentication bypass vulnerability in the Gallery app. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Identity authentication bypass vulnerability in the Gallery app. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

▾ Sunlithuawei · harmonyosEPSS 0.10%via NVD
CVE-2025-58304Medium· 4.9
11mo ago

Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

▾ Sunlithuawei · harmonyosEPSS 0.09%via NVD
CVE-2025-64315Medium· 4.4
11mo ago

Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity.

Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity.

▾ Sunlithuawei · harmonyosEPSS 0.09%via NVD
CVE-2025-64311Medium· 5.1
11mo ago

Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

▾ Sunlithuawei · harmonyosEPSS 0.09%via NVD
CVE-2025-58315Medium· 5.5
11mo ago

Permission control vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Permission control vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

▾ Sunlithuawei · harmonyosEPSS 0.09%via NVD
CVE-2025-58310High· 8.0
11mo ago

Permission control vulnerability in the distributed component. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Permission control vulnerability in the distributed component. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

▾ Twilighthuawei · harmonyosEPSS 0.09%via NVD
CVE-2025-58309Medium· 6.8
11mo ago

Permission control vulnerability in the startup recovery module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

Permission control vulnerability in the startup recovery module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

▾ Sunlithuawei · harmonyosEPSS 0.09%via NVD
CVE-2025-58307Medium· 6.4
11mo ago

UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability.

UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability.

▾ Sunlithuawei · harmonyosEPSS 0.08%via NVD
CVE-2025-58294Medium· 6.2
11mo ago

Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

▾ Sunlithuawei · harmonyosEPSS 0.09%via NVD
CVE-2025-64313Medium· 5.3
11mo ago

Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.

Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.

▾ Sunlithuawei · harmonyosEPSS 0.07%via NVD
CVE-2025-58316High· 7.3
11mo ago

DoS vulnerability in the video-related system service module. Impact: Successful exploitation of this vulnerability may affect availability.

DoS vulnerability in the video-related system service module. Impact: Successful exploitation of this vulnerability may affect availability.

▾ Twilighthuawei · harmonyosEPSS 0.07%via NVD
CVE-2025-58312Medium· 5.1
11mo ago

Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vulnerability may affect availability.

Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vulnerability may affect availability.

▾ Sunlithuawei · harmonyosEPSS 0.08%via NVD
CVE-2025-58301Medium· 6.2
1y ago

Buffer overflow vulnerability in the device management module. Successful exploitation of this vulnerability may affect availability.

Buffer overflow vulnerability in the device management module. Successful exploitation of this vulnerability may affect availability.

▾ Sunlithuawei · harmonyosEPSS 0.09%via NVD
CVE-2025-58300Medium· 6.2
1y ago

Buffer overflow vulnerability in the device management module. Successful exploitation of this vulnerability may affect availability.

Buffer overflow vulnerability in the device management module. Successful exploitation of this vulnerability may affect availability.

▾ Sunlithuawei · harmonyosEPSS 0.09%via NVD
CVE-2025-58293Medium· 5.5
1y ago

Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may affect availability.

Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may affect availability.

▾ Sunlithuawei · harmonyosEPSS 0.09%via NVD
CVE-2025-58289Medium· 5.9
1y ago

Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may affect availability.

Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may affect availability.

▾ Sunlithuawei · harmonyosEPSS 0.09%via NVD
CVE-2025-58299High· 8.4
1y ago

Use After Free (UAF) vulnerability in the storage management module. Successful exploitation of this vulnerability may affect availability.

Use After Free (UAF) vulnerability in the storage management module. Successful exploitation of this vulnerability may affect availability.

▾ Twilighthuawei · harmonyosEPSS 0.10%via NVD
CVE-2025-58295Medium· 5.9
1y ago

Buffer overflow vulnerability in the development framework module. Successful exploitation of this vulnerability may affect availability.

Buffer overflow vulnerability in the development framework module. Successful exploitation of this vulnerability may affect availability.

▾ Sunlithuawei · harmonyosEPSS 0.09%via NVD
CVE-2025-58292Low· 3.3
1y ago

Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.

Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.

▾ Sunlithuawei · harmonyosEPSS 0.11%via NVD
CVE-2025-58291Low· 3.3
1y ago

Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.

Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.

▾ Sunlithuawei · harmonyosEPSS 0.11%via NVD
CVE-2025-58290Low· 3.3
1y ago

Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.

Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.

▾ Sunlithuawei · harmonyosEPSS 0.11%via NVD
CVE-2025-58288Medium· 5.5
1y ago

Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.

Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.

▾ Sunlithuawei · harmonyosEPSS 0.09%via NVD
CVE-2025-58287High· 7.8
1y ago

Use After Free (UAF) vulnerability in the office service. Successful exploitation of this vulnerability may affect service confidentiality.

Use After Free (UAF) vulnerability in the office service. Successful exploitation of this vulnerability may affect service confidentiality.

▾ Twilighthuawei · harmonyosEPSS 0.10%via NVD
CVE-2025-58286Low· 3.3
1y ago

Denial of service (DoS) vulnerability in the office service

Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.

▾ Sunlithuawei · harmonyosEPSS 0.11%via NVD
CVE-2025-58285Medium· 5.3
1y ago

Permission control vulnerability in the media module. Successful exploitation of this vulnerability may affect service confidentiality.

Permission control vulnerability in the media module. Successful exploitation of this vulnerability may affect service confidentiality.

▾ Sunlithuawei · harmonyosEPSS 0.09%via NVD
CVE-2025-58284Medium· 5.9
1y ago

Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service confidentiality.

Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service confidentiality.

▾ Sunlithuawei · harmonyosEPSS 0.10%via NVD
CVE-2025-58283Medium· 5.5
1y ago

Permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service confidentiality.

Permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service confidentiality.

▾ Sunlithuawei · harmonyosEPSS 0.10%via NVD
CVE-2025-58282Low· 2.8
1y ago

Permission control vulnerability in the camera module. Successful exploitation of this vulnerability may affect service confidentiality.

Permission control vulnerability in the camera module. Successful exploitation of this vulnerability may affect service confidentiality.

▾ Sunlithuawei · harmonyosEPSS 0.09%via NVD
CVE-2025-58278Medium· 6.2
1y ago

Identity authentication bypass vulnerability in the Gallery app. Successful exploitation of this vulnerability may affect service confidentiality.

Identity authentication bypass vulnerability in the Gallery app. Successful exploitation of this vulnerability may affect service confidentiality.

▾ Sunlithuawei · harmonyosEPSS 0.11%via NVD
CVE-2025-58277Medium· 4.0
1y ago

Permission verification bypass vulnerability in the Camera app. Successful exploitation of this vulnerability may affect service confidentiality.

Permission verification bypass vulnerability in the Camera app. Successful exploitation of this vulnerability may affect service confidentiality.

▾ Sunlithuawei · harmonyosEPSS 0.09%via NVD
HarmonyOS vulnerabilities (CVEs) — page 2 · VulnSea