CVE Program partner

OpenHarmony

OpenHarmony

API
CVEs, 365 days17178 all time, 1 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationOpenHarmony
RoleCNA
TypeOpen Source
Reports tomitre
ScopeopenHarmony issues only.
Advisorieshttps://gitee.com/openharmony/security/tree/master/en/security-disclosure

Latest CVEs · RSS

  • CVE-2026-33565 2026-05-19 · CVSS 3.3
    in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.
  • CVE-2026-28733 2026-05-19 · CVSS 6.5
    in OpenHarmony v6.0 and prior versions allow a local attacker arbitrary code execution.
  • CVE-2026-27766 2026-05-19 · CVSS 5.5
    in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak.
  • CVE-2026-25850 2026-05-19 · CVSS 5.5
    in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak
  • CVE-2026-25781 2026-05-19 · CVSS 8.4
    in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS and it cannot be recovered.
  • CVE-2026-28751 2026-05-19 · CVSS 3.3
    in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.
  • CVE-2026-27781 2026-05-19 · CVSS 3.3
    in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.
  • CVE-2026-27648 2026-05-19 · CVSS 8.8
    in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps.
  • CVE-2026-25110 2026-05-19 · CVSS 3.3
    in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.
  • CVE-2026-24792 2026-05-19 · CVSS 8.1
    in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps.
  • CVE-2025-6969 2026-03-16 · CVSS 5.0
    in OpenHarmony v5.1.0 and prior versions allow a local attacker cause DOS through improper input.
  • CVE-2025-26474 2026-03-16 · CVSS 3.3
    in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information improper input. This vulnerability can be exploited only in restricted scenari
  • CVE-2025-52458 2026-03-16 · CVSS 5.5
    in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability c
  • CVE-2025-41432 2026-03-16 · CVSS 5.5
    in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability c
  • CVE-2025-25277 2026-03-16 · CVSS 6.3
    in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through using incompatible type. This vulnerabili
  • CVE-2025-12736 2026-03-16 · CVSS 6.5
    in OpenHarmony v5.0.3 and prior versions allow a local attacker case sensitive information leak through use of uninitialized resource.
  • CVE-2026-0639 2026-03-16 · CVSS 3.3
    in OpenHarmony v6.0 and prior versions allow a local attacker case DOS through missing release of memory.
  • CVE-2025-27562 2025-08-11 · CVSS 3.3
    in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.
  • CVE-2025-27128 2025-08-11 · CVSS 8.4
    in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free.
  • CVE-2025-25212 2025-08-11 · CVSS 3.3
    in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through improper input.
  • CVE-2025-24844 2025-08-11 · CVSS 3.3
    in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.
  • CVE-2025-27536 2025-08-11 · CVSS 3.3
    in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through type confusion.
  • CVE-2025-26690 2025-08-11 · CVSS 3.3
    in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.
  • CVE-2025-24925 2025-08-11 · CVSS 3.3
    in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.
  • CVE-2025-24298 2025-08-11 · CVSS 8.4
    in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free.

All CVE Program partners