LowCVSS 3.3
in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.
Vendor
OpenHarmony vulnerabilities
177 published CVES affecting OpenHarmony, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 177
- Critical
- 5
- High
- 66
- Medium
- 96
- Low
- 10
- Unscored
- 0
- CISA KEV
- 0
Products
Latest OpenHarmony CVEs
Newest publication first · page 1 of 8
-
-
MediumCVSS 6.5
in OpenHarmony v6.0 and prior versions allow a local attacker arbitrary code execution.
-
MediumCVSS 5.5
in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak.
-
MediumCVSS 5.5
in OpenHarmony v6.0 and prior versions allow a local attacker cause information leak
-
HighCVSS 8.4
in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS and it cannot be recovered.
-
CVE-2026-28751 filemanagement_storage_service has an improper input validation vulnerability
PublishedLowCVSS 3.3in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.
-
LowCVSS 3.3
in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.
-
HighCVSS 8.8
in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps.
-
LowCVSS 3.3
in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.
-
HighCVSS 8.1
in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps.
-
MediumCVSS 5.5
in OpenHarmony v5.1.0 and prior versions allow a local attacker cause DOS through improper input.
-
LowCVSS 3.3
in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information improper input. This vulnerability can be exploited only in restricted scenarios.
-
HighCVSS 7.8
in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.
-
HighCVSS 7.8
in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.
-
HighCVSS 7.0
in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through using incompatible type. This vulnerability can be exploited only in restricted scenarios.
-
MediumCVSS 6.5
in OpenHarmony v5.0.3 and prior versions allow a local attacker case sensitive information leak through use of uninitialized resource.
-
MediumCVSS 5.5
in OpenHarmony v6.0 and prior versions allow a local attacker case DOS through missing release of memory.
-
MediumCVSS 5.5
in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.
-
HighCVSS 7.8
in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free.
-
MediumCVSS 5.5
in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through improper input.
-
MediumCVSS 5.5
in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.
-
MediumCVSS 5.5
in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through type confusion.
-
MediumCVSS 5.5
in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.
-
MediumCVSS 5.5
in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through missing release of memory.
-
HighCVSS 7.8
in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.