What’s Vulnerable › Products
OpenHarmony vulnerabilities
166 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 90 published in the last 12 months.
Check whether your OpenHarmony version is affected
Latest OpenHarmony vulnerabilities
- CVE-2026-33565 — kernel_linux_common_modules has a Race Condition vulnerability (CVSS 3.3)
- CVE-2026-28751 — filemanagement_storage_service has an improper input validation vulnerability (CVSS 3.3)
- CVE-2026-28733 — filemanagement_storage_service has an use after free vulnerability (CVSS 6.5)
- CVE-2026-27781 — kernel_liteos_a has an integer overflow vulnerability (CVSS 3.3)
- CVE-2026-27766 — multimedia_audio_framework has a Race Condition vulnerability (CVSS 5.5)
- CVE-2026-27648 — web_webview has an out-of-bounds write vulnerability (CVSS 8.8)
- CVE-2026-25850 — filemanagement_storage_service has an improper preservation of permissions vulnerability (CVSS 5.5)
- CVE-2026-25781 — kernel_liteos_a has an out-of-bounds write vulnerability (CVSS 8.4)
- CVE-2026-25110 — Sensors_medical_sensor has a NULL pointer dereference vulnerability (CVSS 3.3)
- CVE-2026-24792 — web_webview has a Race Condition vulnerability (CVSS 8.1)
- CVE-2026-0639 — liteos_a has a missing release of memory vulnerability (CVSS 5.5)
- CVE-2025-6969 — ability_ability_runtime an improper input validation vulnerability (CVSS 5.5)
- CVE-2025-52458 — arkcompiler_ets_runtime has an out-of-bounds write vulnerability (CVSS 7.8)
- CVE-2025-41432 — arkcompiler_ets_runtime has an out-of-bounds write vulnerability (CVSS 7.8)
- CVE-2025-26474 — communication_ipc an improper input validation vulnerability (CVSS 3.3)
- CVE-2025-25277 — arkcompiler_ets_runtime has a type confusion vulnerability (CVSS 7.0)
- CVE-2025-12736 — multimedia_audio_standard has an insecure storage of sensitive information vulnerability (CVSS 6.5)
- CVE-2025-27577 — liteos_a has a race condition vulnerability (CVSS 7.0)
- CVE-2025-27562 — communication_dsoftbus has a missing release of memory vulnerability (CVSS 5.5)
- CVE-2025-27536 — arkcompiler_ets_runtime has a type confusion vulnerability (CVSS 5.5)
- CVE-2025-27128 — liteos_a has an UAF vulnerability (CVSS 7.8)
- CVE-2025-26690 — communication dsoftbus has a NULL pointer vulnerability (CVSS 5.5)
- CVE-2025-25278 — liteos_a has a race condition vulnerability (CVSS 7.0)
- CVE-2025-25212 — pasteboard has an improper input vulnerability (CVSS 5.5)
- CVE-2025-24925 — applications_settings has a missing release of memory vulnerability (CVSS 5.5)