CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2023-34165
https://notcve.org/view.php?id=CVE-2023-34165
Unauthorized access vulnerability in the Save for later feature provided by AI Touch.Successful exploitation of this vulnerability may cause third-party apps to forge a URI for unauthorized access with zero permissions. • https://device.harmonyos.com/en/docs/security/update/security-bulletins-202306-0000001560777672 • CWE-862: Missing Authorization •
CVSS: 7.5EPSS: 0%CPEs: 9EXPL: 0CVE-2023-1696
https://notcve.org/view.php?id=CVE-2023-1696
The multimedia video module has a vulnerability in data processing.Successful exploitation of this vulnerability may affect availability. • https://consumer.huawei.com/en/support/bulletin/2023/4 https://device.harmonyos.com/en/docs/security/update/security-bulletins-202304-0000001506528486 •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2023-1694
https://notcve.org/view.php?id=CVE-2023-1694
The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality. • https://consumer.huawei.com/en/support/bulletin/2023/4 https://device.harmonyos.com/en/docs/security/update/security-bulletins-202304-0000001506528486 • CWE-269: Improper Privilege Management •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2023-1693
https://notcve.org/view.php?id=CVE-2023-1693
The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality. • https://consumer.huawei.com/en/support/bulletin/2023/4 https://device.harmonyos.com/en/docs/security/update/security-bulletins-202304-0000001506528486 • CWE-269: Improper Privilege Management •
CVSS: 7.5EPSS: 0%CPEs: 9EXPL: 0CVE-2023-1692
https://notcve.org/view.php?id=CVE-2023-1692
The window management module lacks permission verification.Successful exploitation of this vulnerability may affect confidentiality. • https://consumer.huawei.com/en/support/bulletin/2023/4 https://device.harmonyos.com/en/docs/security/update/security-bulletins-202304-0000001506528486 • CWE-732: Incorrect Permission Assignment for Critical Resource •