Harmonyos
This hub aggregates every CVE we track for Harmonyos, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.
1,113
CVEs tracked
131
Critical
504
High
0
In CISA KEV
Severity distribution
HIGH504MEDIUM436CRITICAL131LOW42
Monthly trend
18
0
21
26
28
10
9
20
11
11
21
49
5
21
19
17
16
18
18
20
12
15
8
0
2024-092026-08
Latest CVEs
The 15 most recently published vulnerabilities affecting Harmonyos.
- CVE-2026-58557Design defect vulnerability in Expedition mode. Impact: Successful exploitation of this vulnerability may affect availability.4.8
- CVE-2026-58554Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.6.6
- CVE-2026-58555Permission bypass vulnerability in the card module. Impact: Successful exploitation of this vulnerability may affect availability.6.6
- CVE-2026-58553Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.4.0
- CVE-2026-58552Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.5.1
- CVE-2026-58551Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.5.1
- CVE-2026-58550Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.4.0
- CVE-2026-58549Out-of-bounds read vulnerability in the image codec module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.4.0
- CVE-2026-41982Race condition vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability.6.4
- CVE-2026-41981Out-of-bounds write vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability.5.3
- CVE-2026-41977DoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affect availability.5.0
- CVE-2026-41976Permission control vulnerability in the audio framework. Impact: Successful exploitation of this vulnerability may affect service confidentiality.6.6
- CVE-2026-41974Permission control vulnerability in service notifications. Impact: Successful exploitation of this vulnerability may affect availability.3.6
- CVE-2026-41973Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability.5.9
- CVE-2026-41972Path traversal vulnerability in the SMS app. Impact: Successful exploitation of this vulnerability may affect availability.5.4
Product normalization is registry-driven with AI assist and human review. How it works