# Huawei HarmonyOS vulnerabilities Source: https://junglewise.ai/threats/technologies/harmonyos Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 10 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/harmonyos.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 97 vulnerabilities in Huawei HarmonyOS: 0 in the last 7 days and 27 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-101184, was published on 2 November 2026. 15 vulnerabilities in the last four weeks, up 1400% on the four before (1). ## Counts - Last 7 days: 0 - Last 30 days: 15 - Last 90 days: 27 - All time: 97 (2 critical, 0 exploited in the wild) ## About Huawei HarmonyOS Operating system developed by Huawei for mobile devices and other computing platforms. ## Latest Huawei HarmonyOS vulnerabilities - [CVE-2026-101184: Huawei HarmonyOS/EMUI Bluetooth permission control vulnerability](https://junglewise.ai/threats/cve-2026-101184-permission-control-vulnerability-in-the-bluetooth-module-impact) (medium, CVSS 5.5, published 2 Nov 2026) - [CVE-2026-101178: Huawei HarmonyOS autofill service permission control bypass](https://junglewise.ai/threats/cve-2026-101178-permission-control-vulnerability-in-the-autofill-service-module) (medium, CVSS 6.6, published 2 Nov 2026) - [CVE-2026-101186: Huawei HarmonyOS DoS vulnerability in window module](https://junglewise.ai/threats/cve-2026-101186-dos-vulnerability-in-the-window-module-impact-successful) (high, CVSS 7.5, published 2 Nov 2026) - [CVE-2026-101185: Huawei HarmonyOS peripheral module out-of-bounds read](https://junglewise.ai/threats/cve-2026-101185-oob-read-vulnerability-in-the-peripheral-module-impact) (medium, CVSS 5.9, published 2 Nov 2026) - [CVE-2026-101183: Huawei HarmonyOS use-after-free in location service module](https://junglewise.ai/threats/cve-2026-101183-uaf-vulnerability-in-the-location-service-module-impact) (medium, CVSS 5.9, published 2 Nov 2026) - [CVE-2026-101182: Huawei HarmonyOS race condition in location service module](https://junglewise.ai/threats/cve-2026-101182-race-condition-vulnerability-in-the-location-service-module) (medium, CVSS 5.9, published 2 Nov 2026) - [CVE-2026-101181: Huawei HarmonyOS WLAN module permission control vulnerability](https://junglewise.ai/threats/cve-2026-101181-permission-control-vulnerability-in-the-wlan-module-impact) (medium, CVSS 5.5, published 2 Nov 2026) - [CVE-2026-101180: Huawei HarmonyOS DoS vulnerability in file parsing module](https://junglewise.ai/threats/cve-2026-101180-dos-vulnerability-in-the-file-parsing-module-impact-successful) (medium, CVSS 4.3, published 2 Nov 2026) - [CVE-2026-101179: Huawei HarmonyOS buffer overflow in file preview module](https://junglewise.ai/threats/cve-2026-101179-buffer-overflow-vulnerability-in-the-file-preview-module-impact) (medium, CVSS 4.7, published 2 Nov 2026) - [CVE-2026-101176: Huawei HarmonyOS permission control vulnerability in event notification module](https://junglewise.ai/threats/cve-2026-101176-permission-control-vulnerability-in-the-event-notification) (high, CVSS 7.1, published 2 Nov 2026) - [CVE-2026-101175: Huawei HarmonyOS null pointer dereference in ArkWeb module](https://junglewise.ai/threats/cve-2026-101175-null-pointer-dereference-vulnerability-in-the-arkweb-module) (medium, CVSS 4.3, published 2 Nov 2026) - [CVE-2026-101174: Huawei HarmonyOS DSoftBus denial of service](https://junglewise.ai/threats/cve-2026-101174-dos-vulnerability-in-the-dsoftbus-module-impact-successful) (medium, CVSS 5.7, published 2 Nov 2026) - [CVE-2026-101173: Huawei HarmonyOS DSoftBus denial of service](https://junglewise.ai/threats/cve-2026-101173-dos-vulnerability-in-the-dsoftbus-module-impact-successful) (medium, CVSS 6.5, published 2 Nov 2026) - [CVE-2026-101172: Huawei HarmonyOS permission control vulnerability in graphics module](https://junglewise.ai/threats/cve-2026-101172-permission-control-vulnerability-in-the-graphics-module-impact) (medium, CVSS 6.2, published 2 Nov 2026) - [CVE-2026-101170: Huawei HarmonyOS file parsing denial of service](https://junglewise.ai/threats/cve-2026-101170-dos-vulnerability-in-the-file-parsing-module-impact-successful) (medium, CVSS 4, published 2 Nov 2026) - [CVE-2026-81645: Huawei HarmonyOS out-of-bounds read in graphics module](https://junglewise.ai/threats/cve-2026-81645-out-of-bounds-read-vulnerability-in-the-graphics-module) (medium, CVSS 5.9, published 24 Sep 2026) - [CVE-2026-81647: Huawei HarmonyOS out-of-bounds read in graphics module](https://junglewise.ai/threats/cve-2026-81647-huawei-harmonyos-out-of-bounds-read-in-graphics-module) (medium, CVSS 5.3, published 9 Sep 2026) - [CVE-2026-81646: Huawei HarmonyOS out-of-bounds read in graphics module](https://junglewise.ai/threats/cve-2026-81646-huawei-harmonyos-out-of-bounds-read-in-graphics-module) (medium, CVSS 5.9, published 9 Sep 2026) - [CVE-2026-81644: Huawei HarmonyOS DoS vulnerability in preview service module](https://junglewise.ai/threats/cve-2026-81644-huawei-harmonyos-dos-vulnerability-in-preview-service-module) (medium, CVSS 4.3, published 9 Sep 2026) - [CVE-2026-49315: Huawei HarmonyOS input device module denial of service](https://junglewise.ai/threats/cve-2026-49315-huawei-harmonyos-input-device-module-denial-of-service) (high, CVSS 7.1, published 9 Sep 2026) - [CVE-2026-49314: Huawei HarmonyOS out-of-bounds write in rendering and composition](https://junglewise.ai/threats/cve-2026-49314-huawei-harmonyos-out-of-bounds-write-in-rendering-and-composition) (high, CVSS 7.3, published 9 Sep 2026) - [CVE-2026-49313: Huawei HarmonyOS permission control vulnerability in app lock module](https://junglewise.ai/threats/cve-2026-49313-huawei-harmonyos-permission-control-vulnerability-in-app-lock) (medium, CVSS 5.5, published 9 Sep 2026) - [CVE-2026-49312: Huawei HarmonyOS permission control vulnerability in window module](https://junglewise.ai/threats/cve-2026-49312-huawei-harmonyos-permission-control-vulnerability-in-window) (medium, CVSS 4, published 9 Sep 2026) - [CVE-2026-49311: Huawei HarmonyOS permission control vulnerability in event notification module](https://junglewise.ai/threats/cve-2026-49311-huawei-harmonyos-permission-control-vulnerability-in-event) (medium, CVSS 6.2, published 9 Sep 2026) - [CVE-2026-49310: Huawei HarmonyOS permission control vulnerability in event notification module](https://junglewise.ai/threats/cve-2026-49310-huawei-harmonyos-permission-control-vulnerability-in-event) (high, CVSS 8.6, published 9 Sep 2026) ## Most severe Huawei HarmonyOS vulnerabilities - [CVE-2025-64314: Permission control vulnerability in the memory management module. Impact: Successful exploitation of this…](https://junglewise.ai/threats/cve-2025-64314-permission-control-vulnerability-in-the-memory-management-module) (critical, CVSS 9.3, published 28 Nov 2025) - [CVE-2026-34865: Huawei HarmonyOS out-of-bounds write in WEB module](https://junglewise.ai/threats/cve-2026-34865-huawei-harmonyos-out-of-bounds-write-in-web-module) (critical, CVSS 9.1, published 13 Apr 2026) - [CVE-2026-49310: Huawei HarmonyOS permission control vulnerability in event notification module](https://junglewise.ai/threats/cve-2026-49310-huawei-harmonyos-permission-control-vulnerability-in-event) (high, CVSS 8.6, published 9 Sep 2026) - [CVE-2025-58302: Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may…](https://junglewise.ai/threats/cve-2025-58302-permission-control-vulnerability-in-the-settings-module-impact) (high, CVSS 8.4, published 28 Nov 2025) - [CVE-2025-58303: UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may…](https://junglewise.ai/threats/cve-2025-58303-uaf-vulnerability-in-the-screen-recording-framework-module-impact) (high, CVSS 8.4, published 28 Nov 2025) - [CVE-2025-66328: Multi-thread race condition vulnerability in the network management module. Impact: Successful exploitation of this…](https://junglewise.ai/threats/cve-2025-66328-multi-thread-race-condition-vulnerability-in-the-network) (high, CVSS 8.4, published 8 Dec 2025) - [CVE-2026-41964: Huawei HarmonyOS permission control vulnerability in web component](https://junglewise.ai/threats/cve-2026-41964-huawei-harmonyos-permission-control-vulnerability-in-web) (high, CVSS 8.4, published 15 May 2026) - [CVE-2026-58558: Huawei HarmonyOS and EMUI permission control vulnerability in file system](https://junglewise.ai/threats/cve-2026-58558-huawei-harmonyos-and-emui-permission-control-vulnerability-in) (high, CVSS 7.8, published 15 Jul 2026) - [CVE-2026-34853: Huawei HarmonyOS and EMUI permission bypass in LBS module](https://junglewise.ai/threats/cve-2026-34853-huawei-harmonyos-and-emui-permission-bypass-in-lbs-module) (high, CVSS 7.7, published 13 Apr 2026) - [CVE-2026-101186: Huawei HarmonyOS DoS vulnerability in window module](https://junglewise.ai/threats/cve-2026-101186-dos-vulnerability-in-the-window-module-impact-successful) (high, CVSS 7.5, published 2 Nov 2026) ## Vulnerabilities per week 15 vulnerabilities in the last four weeks, up 1400% on the four before (1). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 11 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 1 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 15 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Huawei technologies - [Huawei EMUI](https://junglewise.ai/threats/technologies/emui): 31 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Huawei HarmonyOS vulnerabilities", https://junglewise.ai/threats/technologies/harmonyos, 10 November 2026.