Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2026-34865 | 10.0 critical | 0.00% | huawei, harmonyos | Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. | Mon 26 Oct |
| CVE-2026-28553 | 7.5 high | 0.00% | huawei, harmonyos, emui | Vulnerability of improper permission control in the theme setting module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | Mon 26 Oct |
| CVE-2026-34851 | 7.5 high | 0.00% | huawei, harmonyos | Race condition vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect availability. | Mon 26 Oct |
| CVE-2026-34856 | 7.5 high | 0.00% | huawei, harmonyos | UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability. | Mon 26 Oct |
| CVE-2026-34853 | 7.5 high | 0.00% | huawei, harmonyos, emui | Permission bypass vulnerability in the LBS module. Impact: Successful exploitation of this vulnerability may affect availability. | Mon 26 Oct |
| CVE-2025-64312 | 7.5 high | 0.00% | huawei, harmonyos | Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | 8 Oct |
| CVE-2026-34854 | 7.1 high | 0.00% | huawei, harmonyos, emui | UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. | Mon 26 Oct |
| CVE-2026-34859 | 7.1 high | 0.00% | huawei, harmonyos, emui | UAF vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. | Mon 26 Oct |
| CVE-2025-58314 | 7.1 high | 0.00% | huawei, emui, harmonyos | Vulnerability of accessing invalid memory in the component driver module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. | 18 Oct |
| CVE-2025-58311 | 7.1 high | 0.00% | huawei, emui, harmonyos | UAF vulnerability in the USB driver module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. | 18 Oct |
| CVE-2025-58309 | 7.1 high | 0.00% | huawei, harmonyos | Permission control vulnerability in the startup recovery module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. | 8 Oct |
| CVE-2025-64315 | 7.1 high | 0.00% | huawei, harmonyos | Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity. | 8 Oct |
| CVE-2026-34860 | 6.5 medium | 0.00% | huawei, harmonyos | Access control vulnerability in the memo module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. | Mon 26 Oct |
| CVE-2026-34852 | 6.5 medium | 0.00% | huawei, harmonyos | Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerability may affect availability. | Mon 26 Oct |
| CVE-2026-34850 | 5.9 medium | 0.00% | huawei, harmonyos | Race condition vulnerability in the notification service. Impact: Successful exploitation of this vulnerability may affect availability. | Mon 26 Oct |
| CVE-2026-34855 | 5.7 medium | 0.00% | huawei, harmonyos, emui | Out-of-bounds write vulnerability in the kernel module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. | Sun 25 Oct |
| CVE-2026-34867 | 5.6 medium | 0.00% | huawei, harmonyos | Double free vulnerability in the multi-mode input system. Impact: Successful exploitation of this vulnerability may affect availability. | Mon 26 Oct |
| CVE-2026-34857 | 5.5 medium | 0.00% | huawei, harmonyos | UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability. | Mon 26 Oct |
| CVE-2026-34864 | 5.5 medium | 0.00% | huawei, harmonyos | Boundary-unlimited vulnerability in the application read module. Impact: Successful exploitation of this vulnerability may affect availability. | Mon 26 Oct |
| CVE-2026-34863 | 5.5 medium | 0.00% | huawei, harmonyos | Out-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability. | Mon 26 Oct |
| CVE-2025-58276 | 5.5 medium | 0.00% | huawei, emui, harmonyos | Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability. | 18 Oct |
| CVE-2025-58303 | 5.5 medium | 0.00% | huawei, harmonyos | UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability. | 18 Oct |
| CVE-2025-64314 | 5.5 medium | 0.00% | huawei, harmonyos | Permission control vulnerability in the memory management module. Impact: Successful exploitation of this vulnerability may affect confidentiality. | 18 Oct |
| CVE-2025-58302 | 5.5 medium | 0.00% | huawei, emui, harmonyos | Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | 18 Oct |
| CVE-2025-54654 | 5.5 medium | 0.00% | huawei, harmonyos | Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality | 8 Oct |
| CVE-2025-58277 | 5.5 medium | 0.00% | huawei, harmonyos | Permission verification bypass vulnerability in the Camera app. Successful exploitation of this vulnerability may affect service confidentiality. | 8 Oct |
| CVE-2025-58278 | 5.5 medium | 0.00% | huawei, harmonyos | Identity authentication bypass vulnerability in the Gallery app. Successful exploitation of this vulnerability may affect service confidentiality. | 8 Oct |
| CVE-2025-58282 | 5.5 medium | 0.00% | huawei, harmonyos | Permission control vulnerability in the camera module. Successful exploitation of this vulnerability may affect service confidentiality. | 8 Oct |
| CVE-2025-58283 | 5.5 medium | 0.00% | huawei, harmonyos | Permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service confidentiality. | 8 Oct |
| CVE-2025-58284 | 5.5 medium | 0.00% | huawei, harmonyos | Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service confidentiality. | 8 Oct |
| CVE-2025-58285 | 5.5 medium | 0.00% | huawei, harmonyos | Permission control vulnerability in the media module. Successful exploitation of this vulnerability may affect service confidentiality. | 8 Oct |
| CVE-2025-58286 | 5.5 medium | 0.00% | huawei, harmonyos | Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability. | 8 Oct |
| CVE-2025-58287 | 5.5 medium | 0.00% | huawei, harmonyos | Use After Free (UAF) vulnerability in the office service. Successful exploitation of this vulnerability may affect service confidentiality. | 8 Oct |
| CVE-2025-58288 | 5.5 medium | 0.00% | huawei, harmonyos | Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability. | 8 Oct |
| CVE-2025-58290 | 5.5 medium | 0.00% | huawei, harmonyos | Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability. | 8 Oct |
| CVE-2025-58291 | 5.5 medium | 0.00% | huawei, harmonyos | Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability. | 8 Oct |
| CVE-2025-58292 | 5.5 medium | 0.00% | huawei, harmonyos | Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability. | 8 Oct |
| CVE-2025-58295 | 5.5 medium | 0.00% | huawei, harmonyos | Buffer overflow vulnerability in the development framework module. Successful exploitation of this vulnerability may affect availability. | 8 Oct |
| CVE-2025-58297 | 5.5 medium | 0.00% | huawei, harmonyos | Buffer overflow vulnerability in the sensor service. Successful exploitation of this vulnerability may affect availability. | 8 Oct |
| CVE-2025-58298 | 5.5 medium | 0.00% | huawei, harmonyos | Data processing error vulnerability in the package management module. Successful exploitation of this vulnerability may affect availability. | 8 Oct |
| CVE-2025-58299 | 5.5 medium | 0.00% | huawei, harmonyos | Use After Free (UAF) vulnerability in the storage management module. Successful exploitation of this vulnerability may affect availability. | 8 Oct |
| CVE-2025-58289 | 5.5 medium | 0.00% | huawei, harmonyos | Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may affect availability. | 8 Oct |
| CVE-2025-58293 | 5.5 medium | 0.00% | huawei, harmonyos | Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may affect availability. | 8 Oct |
| CVE-2025-58300 | 5.5 medium | 0.00% | huawei, harmonyos | Buffer overflow vulnerability in the device management module. Successful exploitation of this vulnerability may affect availability. | 8 Oct |
| CVE-2025-58301 | 5.5 medium | 0.00% | huawei, harmonyos | Buffer overflow vulnerability in the device management module. Successful exploitation of this vulnerability may affect availability. | 8 Oct |
| CVE-2025-58294 | 5.5 medium | 0.00% | huawei, harmonyos | Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | 8 Oct |
| CVE-2025-58307 | 5.5 medium | 0.00% | huawei, harmonyos | UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability. | 8 Oct |
| CVE-2025-58310 | 5.5 medium | 0.00% | huawei, harmonyos | Permission control vulnerability in the distributed component. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | 8 Oct |
| CVE-2025-58312 | 5.5 medium | 0.00% | huawei, harmonyos | Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vulnerability may affect availability. | 8 Oct |
| CVE-2025-58315 | 5.5 medium | 0.00% | huawei, harmonyos | Permission control vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. | 8 Oct |
50 of 61 · Next
Download these 61 as CSV · subscribe to this list.
EPSS scores: 2026-10-27. NVD cursor: 2026-10-28 21:20. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.