CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2023-34157
https://notcve.org/view.php?id=CVE-2023-34157
Vulnerability of HwWatchHealth being hijacked.Successful exploitation of this vulnerability may cause repeated pop-up windows of the app. • https://device.harmonyos.com/en/docs/security/update/security-bulletins-202306-0000001560777672 •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2023-34165
https://notcve.org/view.php?id=CVE-2023-34165
Unauthorized access vulnerability in the Save for later feature provided by AI Touch.Successful exploitation of this vulnerability may cause third-party apps to forge a URI for unauthorized access with zero permissions. • https://device.harmonyos.com/en/docs/security/update/security-bulletins-202306-0000001560777672 • CWE-862: Missing Authorization •
CVSS: 8.2EPSS: 0%CPEs: 1EXPL: 0CVE-2023-34154
https://notcve.org/view.php?id=CVE-2023-34154
Vulnerability of undefined permissions in HUAWEI VR screen projection.Successful exploitation of this vulnerability will cause third-party apps to create windows in an arbitrary way, consuming system resources. • https://device.harmonyos.com/en/docs/security/update/security-bulletins-202306-0000001560777672 • CWE-732: Incorrect Permission Assignment for Critical Resource •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2022-48478
https://notcve.org/view.php?id=CVE-2022-48478
The facial recognition TA of some products lacks memory length verification. Successful exploitation of this vulnerability may cause exceptions of the facial recognition service. • https://device.harmonyos.com/en/docs/security/update/security-bulletins-202305-0000001532778780 •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2022-48479
https://notcve.org/view.php?id=CVE-2022-48479
The facial recognition TA of some products has the out-of-bounds memory read vulnerability. Successful exploitation of this vulnerability may cause exceptions of the facial recognition service. • https://device.harmonyos.com/en/docs/security/update/security-bulletins-202305-0000001532778780 • CWE-125: Out-of-bounds Read •