Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.
  • 9.8

    CRITICAL
    CVE-2021-39993

    There is an Integer overflow vulnerability with ACPU in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds access.... Read more

    Affected Products : emui magic_ui
    • Published: Jan. 10, 2022
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2021-39992

    There is an improper security permission configuration vulnerability on ACPU.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.... Read more

    Affected Products : emui
    • Published: Feb. 09, 2022
    • Modified: Nov. 21, 2024
  • 5.5

    MEDIUM
    CVE-2021-39991

    There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect service confidentiality.... Read more

    Affected Products : emui
    • Published: Feb. 09, 2022
    • Modified: Nov. 21, 2024
  • 5.5

    MEDIUM
    CVE-2021-39986

    There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect service confidentiality.... Read more

    Affected Products : emui
    • Published: Feb. 09, 2022
    • Modified: Nov. 21, 2024
  • 9.1

    CRITICAL
    CVE-2021-39982

    Phone Manager application has a Improper Privilege Management vulnerability.Successful exploitation of this vulnerability may read and write arbitrary files by tampering with Phone Manager notifications.... Read more

    Affected Products : harmonyos
    • Published: Jan. 03, 2022
    • Modified: Nov. 21, 2024
  • 5.3

    MEDIUM
    CVE-2021-39981

    Chang Lian application has a vulnerability which can be maliciously exploited to hide the calling number.Successful exploitation of this vulnerability allows you to make an anonymous call.... Read more

    Affected Products : harmonyos
    • Published: Jan. 03, 2022
    • Modified: Nov. 21, 2024
  • 5.3

    MEDIUM
    CVE-2021-39980

    Telephony application has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability could lead to sensitive information disclosure.... Read more

    Affected Products : harmonyos
    • Published: Jan. 03, 2022
    • Modified: Nov. 21, 2024
  • 10.0

    HIGH
    CVE-2021-39979

    HHEE system has a Code Injection vulnerability.Successful exploitation of this vulnerability may affect HHEE system integrity.... Read more

    Affected Products : harmonyos
    • Published: Jan. 03, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-39978

    Telephony application has a SQL Injection vulnerability.Successful exploitation of this vulnerability may cause privacy and security issues.... Read more

    Affected Products : harmonyos
    • Published: Jan. 03, 2022
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2021-39976

    There is a privilege escalation vulnerability in CloudEngine 5800 V200R020C00SPC600. Due to lack of privilege restrictions, an authenticated local attacker can perform specific operation to exploit this vulnerability. Successful exploitation may cause the... Read more

    • Published: Nov. 23, 2021
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-39975

    Hilinksvc has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause denial of service attacks.... Read more

    Affected Products : harmonyos
    • Published: Jan. 03, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-39974

    There is an Out-of-bounds read in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.... Read more

    Affected Products : emui harmonyos magic_ui
    • Published: Jan. 03, 2022
    • Modified: Nov. 21, 2024
  • 7.8

    HIGH
    CVE-2021-39973

    There is a Null pointer dereference in Smartphones.Successful exploitation of this vulnerability may cause the kernel to break down.... Read more

    Affected Products : emui harmonyos magic_ui
    • Published: Jan. 03, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-39972

    MyHuawei-App has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability could compromise confidentiality.... Read more

    Affected Products : harmonyos
    • Published: Jan. 03, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-39971

    Password vault has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability could compromise confidentiality.... Read more

    Affected Products : harmonyos
    • Published: Jan. 03, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-39970

    HwPCAssistant has a Improper Input Validation vulnerability.Successful exploitation of this vulnerability may create any file with the system app permission.... Read more

    Affected Products : harmonyos
    • Published: Jan. 03, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-39969

    There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.... Read more

    Affected Products : emui harmonyos magic_ui
    • Published: Jan. 03, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-39968

    Changlian Blocklist has a Business Logic Errors vulnerability .Successful exploitation of this vulnerability may expand the attack surface of the message class.... Read more

    Affected Products : harmonyos
    • Published: Jan. 03, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-39966

    There is an Uninitialized AOD driver structure in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.... Read more

    Affected Products : emui harmonyos magic_ui
    • Published: Jan. 03, 2022
    • Modified: Nov. 21, 2024
  • 7.5

    HIGH
    CVE-2021-39947

    In specific circumstances, trace file buffers in GitLab Runner versions up to 14.3.4, 14.4 to 14.4.2, and 14.5 to 14.5.2 would re-use the file descriptor 0 for multiple traces and mix the output of several jobs... Read more

    Affected Products : gitlab_runner
    • Published: Jun. 06, 2022
    • Modified: Nov. 21, 2024
Showing 20 of 293259 Results