CVE Tools
Track your stack

Harmonyos

1,152 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Harmonyos, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Harmonyos CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Harmonyos CVEs per month
MonthCVEs
2024-1226
2025-0128
2025-0210
2025-039
2025-0420
2025-0511
2025-0611
2025-0721
2025-0849
2025-095
2025-1021
2025-1119
2025-1217
2026-0116
2026-0218
2026-0318
2026-0420
2026-0512
2026-0615
2026-078
2026-0810
2026-0912
2026-100
2026-1117

Severity

How the 1,152 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical13111%
  • High50944%
  • Medium46741%
  • Low454%

Latest CVEs

The 15 most recently published vulnerabilities affecting Harmonyos.

  1. CVE-2026-101184Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability.5.5
  2. CVE-2026-101178Permission control vulnerability in the autofill service module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.6.6
  3. CVE-2026-101177Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.3.7
  4. CVE-2026-101174DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.5.7
  5. CVE-2026-101173DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.6.5
  6. CVE-2026-101176Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.7.1
  7. CVE-2026-101186DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability.7.5
  8. CVE-2026-101185OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.5.9
  9. CVE-2026-101183UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.5.9
  10. CVE-2026-101182Race condition vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.5.9
  11. CVE-2026-101181Permission control vulnerability in the WLAN module.  Impact: Successful exploitation of this vulnerability may affect service confidentiality.5.5
  12. CVE-2026-101180DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability.4.3
  13. CVE-2026-101179Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect availability.4.7
  14. CVE-2026-101175Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect availability.4.3
  15. CVE-2026-101171Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vulnerability may affect service integrity.3.6

Product grouping is registry-driven, with AI assist and human review. How it works