By year
22
23
24
25
26
Bars are flaws published each year; the red part is the share attackers have used.
Latest high and critical flaws
- CVE-2026-27648 in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps.High 8.8 · May 19, 2026
- CVE-2026-25781 in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS and it cannot be recovered.High 8.4 · May 19, 2026
- CVE-2026-24792 in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps.High 8.1 · May 19, 2026
- CVE-2025-27577 in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through race condition.High 8.4 · Aug 11, 2025
- CVE-2025-27128 in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free.High 8.4 · Aug 11, 2025
- CVE-2025-25278 in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through race condition.High 8.4 · Aug 11, 2025
- CVE-2025-24298 in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free.High 8.4 · Aug 11, 2025
- CVE-2025-0304 in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use afterHigh 8.8 · Feb 7, 2025
- CVE-2025-0303 in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through buffer ovHigh 8.8 · Feb 7, 2025
- CVE-2024-47398 in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the device is unable to boot up through out-of-bounds write.High 8.8 · Jan 7, 2025
- CVE-2024-10074 in OpenHarmony v4.1.1 and prior versions allow a local attacker cause the common permission is upgraded to root through use after free.High 8.8 · Dec 3, 2024
- CVE-2024-47797 in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through out-of-boHigh 8.4 · Nov 5, 2024
- CVE-2024-47404 in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through double frHigh 8.4 · Nov 5, 2024
- CVE-2024-47137 in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through out-of-boHigh 8.4 · Nov 5, 2024
- CVE-2024-41160 in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use afterHigh 8.8 · Sep 2, 2024
- CVE-2024-41157 in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use afterHigh 8.8 · Sep 2, 2024
- CVE-2024-39816 in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write.High 8.4 · Sep 2, 2024
- CVE-2024-38386 in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write.High 8.4 · Sep 2, 2024
- CVE-2024-37185 in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write.High 8.2 · Jul 2, 2024
- CVE-2024-37077 in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write.High 8.2 · Jul 2, 2024
- CVE-2024-37030 in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through use after free.High 8.2 · Jul 2, 2024
- CVE-2024-36260 in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write.High 8.2 · Jul 2, 2024
- CVE-2024-36243 in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds read and write.High 8.2 · Jul 2, 2024
- CVE-2024-28226 in OpenHarmony v4.0.0 and prior versions allow a remote attacker cause DOS through improper input.High 8.1 · Apr 2, 2024
- CVE-2024-22092 in OpenHarmony v3.2.4 and prior versions allow a remote attacker bypass permission verification to install apps, although these require user action.High 7.7 · Apr 2, 2024
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.