Updated 23 min ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,764exploited flaws on CISA’s list

36added in the last 30 days

479new WordPress flaws this week

390,525entries in the database

1,068 results · page 3 of 22

Feb 6, 2026Permission control vulnerability in the AMS module.CVE-2026-24920 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Permission control vulnerability in the AMS module. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Feb 6, 2026Vulnerability of improper criterion security check in the card module.CVE-2026-24931 · Other software · Huawei · reported by psirt@huawei.comMedium 5.9
Vulnerability of improper criterion security check in the card module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Feb 6, 2026UAF concurrency vulnerability in the graphics module.CVE-2026-24930 · Other software · Huawei · reported by psirt@huawei.comHigh 8.4
UAF concurrency vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Feb 6, 2026Out-of-bounds read vulnerability in the graphics module.CVE-2026-24929 · Other software · Huawei · reported by psirt@huawei.comMedium 5.9
Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Feb 6, 2026Out-of-bounds write vulnerability in the camera module.CVE-2026-24926 · Other software · Huawei · reported by psirt@huawei.comHigh 8.4
Out-of-bounds write vulnerability in the camera module. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Feb 6, 2026Heap-based buffer overflow vulnerability in the image module.CVE-2026-24925 · Other software · Huawei · reported by psirt@huawei.comHigh 7.3
Heap-based buffer overflow vulnerability in the image module. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Feb 6, 2026Permission control vulnerability in the HDC module.CVE-2026-24923 · Other software · Huawei · reported by psirt@huawei.comMedium 6.3
Permission control vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Feb 6, 2026Buffer overflow vulnerability in the HDC module.CVE-2026-24922 · Other software · Huawei · reported by psirt@huawei.comMedium 6.9
Buffer overflow vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Feb 6, 2026Address read vulnerability in the HDC module.CVE-2026-24921 · Other software · Huawei · reported by psirt@huawei.comMedium 4.8
Address read vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Feb 6, 2026Out-of-bounds write vulnerability in the DFX module.CVE-2026-24919 · Other software · Huawei · reported by psirt@huawei.comMedium 6
Out-of-bounds write vulnerability in the DFX module. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com
Feb 6, 2026Address read vulnerability in the communication module.CVE-2026-24918 · Other software · Huawei · reported by psirt@huawei.comMedium 6.8
Address read vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Feb 6, 2026UAF vulnerability in the security module.CVE-2026-24917 · Other software · Huawei · reported by psirt@huawei.comMedium 6.5
UAF vulnerability in the security module. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com
Feb 6, 2026Identity authentication bypass vulnerability in the window module.CVE-2026-24916 · Other software · Huawei · reported by psirt@huawei.comMedium 5.9
Identity authentication bypass vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com
Feb 6, 2026Out-of-bounds read issue in the media subsystem.CVE-2026-24915 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Out-of-bounds read issue in the media subsystem. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Feb 6, 2026Type confusion vulnerability in the camera module.CVE-2026-24914 · Other software · Huawei · reported by psirt@huawei.comMedium 4
Type confusion vulnerability in the camera module. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Jan 13, 2026Permission verification bypass vulnerability in the media library module.CVE-2025-68970 · Other software · Huawei · reported by psirt@huawei.comMedium 6.1
Permission verification bypass vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Jan 13, 2026Multi-thread race condition vulnerability in the thermal management module.CVE-2025-68969 · Other software · Huawei · reported by psirt@huawei.comMedium 6.8
Multi-thread race condition vulnerability in the thermal management module. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Jan 13, 2026Double free vulnerability in the multi-mode input module.CVE-2025-68968 · Other software · Huawei · reported by psirt@huawei.comHigh 7.8
Double free vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect the input function.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Jan 13, 2026Vulnerability of improper permission control in the print module.CVE-2025-68967 · Other software · Huawei · reported by psirt@huawei.comMedium 5.7
Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Jan 13, 2026Permission control vulnerability in the Notepad module.CVE-2025-68966 · Other software · Huawei · reported by psirt@huawei.comMedium 5.1
Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Jan 13, 2026Permission control vulnerability in the Notepad module.CVE-2025-68965 · Other software · Huawei · reported by psirt@huawei.comMedium 4.7
Permission control vulnerability in the Notepad module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Jan 13, 2026Data verification vulnerability in the HiView module.CVE-2025-68964 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Data verification vulnerability in the HiView module. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Jan 13, 2026Man-in-the-middle attack vulnerability in the Clone module.CVE-2025-68963 · Other software · Huawei · reported by psirt@huawei.comMedium 5.7
Man-in-the-middle attack vulnerability in the Clone module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com
Jan 13, 2026Multi-thread race condition vulnerability in the camera framework module.CVE-2025-68962 · Other software · Huawei · reported by psirt@huawei.comMedium 5.1
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Jan 13, 2026Multi-thread race condition vulnerability in the camera framework module.CVE-2025-68961 · Other software · Huawei · reported by psirt@huawei.comMedium 5.1
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Jan 13, 2026Multi-thread race condition vulnerability in the video framework module.CVE-2025-68960 · Other software · Huawei · reported by psirt@huawei.comHigh 8.4
Multi-thread race condition vulnerability in the video framework module. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Jan 13, 2026Permission verification bypass vulnerability in the media library module.CVE-2025-68959 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Permission verification bypass vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Jan 13, 2026Multi-thread race condition vulnerability in the card framework module.CVE-2025-68958 · Other software · Huawei · reported by psirt@huawei.comHigh 8
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Jan 13, 2026Multi-thread race condition vulnerability in the card framework module.CVE-2025-68957 · Other software · Huawei · reported by psirt@huawei.comHigh 8.4
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Jan 13, 2026Multi-thread race condition vulnerability in the card framework module.CVE-2025-68956 · Other software · Huawei · reported by psirt@huawei.comHigh 8
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Jan 13, 2026Multi-thread race condition vulnerability in the card framework module.CVE-2025-68955 · Other software · Huawei · reported by psirt@huawei.comHigh 8
Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Dec 8, 2025Denial of service (DoS) vulnerability in the office service.CVE-2025-66334 · Other software · Huawei · reported by psirt@huawei.comLow 3.3
Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com
Dec 8, 2025Denial of service (DoS) vulnerability in the office service.CVE-2025-66333 · Other software · Huawei · reported by psirt@huawei.comLow 3.3
Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com
Dec 8, 2025Denial of service (DoS) vulnerability in the office service.CVE-2025-66332 · Other software · Huawei · reported by psirt@huawei.comLow 3.3
Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com
Dec 8, 2025Denial of service (DoS) vulnerability in the office service.CVE-2025-66331 · Other software · Huawei · reported by psirt@huawei.comLow 3.3
Denial of service (DoS) vulnerability in the office service. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com
Dec 8, 2025App lock verification bypass vulnerability in the file management app.CVE-2025-66330 · Other software · Huawei · reported by psirt@huawei.comMedium 4.9
App lock verification bypass vulnerability in the file management app. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com
Dec 8, 2025Permission control vulnerability in the window management module.CVE-2025-66329 · Other software · Huawei · reported by psirt@huawei.comMedium 4
Permission control vulnerability in the window management module. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com consumer.huawei.com
Dec 8, 2025Multi-thread race condition vulnerability in the network management module.CVE-2025-66328 · Other software · Huawei · reported by psirt@huawei.comHigh 8.4
Multi-thread race condition vulnerability in the network management module. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com
Dec 8, 2025Race condition vulnerability in the network module.CVE-2025-66327 · Other software · Huawei · reported by psirt@huawei.comHigh 7.1
Race condition vulnerability in the network module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com
Dec 8, 2025Permission control vulnerability in the package management module.CVE-2025-66325 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2
Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com
Dec 8, 2025Permission control vulnerability in the media library module.CVE-2025-58279 · Other software · Huawei · reported by psirt@huawei.comMedium 4.4
Permission control vulnerability in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com
Dec 8, 2025Race condition vulnerability in the audio module.CVE-2025-66326 · Other software · Huawei · reported by psirt@huawei.comMedium 6.7
Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com
Dec 8, 2025Input verification vulnerability in the compression and decompression module.CVE-2025-66324 · Other software · Huawei · reported by psirt@huawei.comHigh 8.4
Input verification vulnerability in the compression and decompression module. Impact: Successful exploitation of this vulnerability may affect app data integrity.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com
Dec 8, 2025Vulnerability of improper criterion security check in the card module.CVE-2025-66323 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3
Vulnerability of improper criterion security check in the card module. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com
Dec 8, 2025Multi-thread race condition vulnerability in the camera framework module.CVE-2025-66322 · Other software · Huawei · reported by psirt@huawei.comMedium 5.1
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com
Dec 8, 2025Multi-thread race condition vulnerability in the camera framework module.CVE-2025-66321 · Other software · Huawei · reported by psirt@huawei.comMedium 5.1
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com
Dec 8, 2025Multi-thread race condition vulnerability in the camera framework module.CVE-2025-66320 · Other software · Huawei · reported by psirt@huawei.comMedium 5.1
Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com
Nov 27, 2025Permission control vulnerability in the file management module.CVE-2025-64312 · Other software · Huawei · reported by psirt@huawei.comMedium 4.9
Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com
Nov 27, 2025UAF vulnerability in the USB driver module.CVE-2025-58311 · Other software · Huawei · reported by psirt@huawei.comMedium 5.8
UAF vulnerability in the USB driver module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com
Nov 27, 2025Vulnerability of improper criterion security check in the call module.CVE-2025-58308 · Other software · Huawei · reported by psirt@huawei.comHigh 7.3
Vulnerability of improper criterion security check in the call module. Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
Product
HarmonyOS
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record consumer.huawei.com

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Vulnerability database

The flaws that hit local websites, every Friday.

Tell us what you're building.