CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,437 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,437
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product huawei:emui. Show all products

29 CVEs, showing 1 to 29
CVESeverityTitlePublished
CVE-2026-49309Medium 4.8Permission control vulnerability in the Settings module.
Assigned by huawei
Sep 9, 2026
CVE-2026-41987Medium 6.2Permission control vulnerability in the app management module.
Assigned by huawei
Sep 9, 2026
CVE-2026-49315High 7.1DoS vulnerability in the input device module.
Assigned by huawei
Sep 9, 2026
CVE-2026-49303Medium 5.1Permission control vulnerability in the notification module.
Assigned by huawei
Aug 17, 2026
CVE-2026-49301Medium 6.2Permission control vulnerability in the Gallery module.
Assigned by huawei
Aug 17, 2026
CVE-2026-49305Medium 6.2Permission control vulnerability in the Wi-Fi enhancement module.
Assigned by huawei
Aug 17, 2026
CVE-2026-34859High 7.1UAF vulnerability in the kernel module.Apr 13, 2026
CVE-2026-34855Medium 5.7Out-of-bounds write vulnerability in the kernel module.Apr 13, 2026
CVE-2026-34854High 7.1UAF vulnerability in the kernel module.Apr 13, 2026
CVE-2026-34853High 7.5Permission bypass vulnerability in the LBS module.Apr 13, 2026
CVE-2026-28553High 7.5Vulnerability of improper permission control in the theme setting module.Apr 13, 2026
CVE-2026-28548Medium 5.5Vulnerability of improper verification in the email application.Mar 5, 2026
CVE-2026-28542Medium 5.5Permission bypass vulnerability in the system service framework.Mar 5, 2026
CVE-2026-28552High 7.5Out-of-bounds write vulnerability in the IMS module.Mar 5, 2026
CVE-2026-24928Medium 5.5Out-of-bounds write vulnerability in the file system module.Feb 6, 2026
CVE-2026-24927Medium 5.5Out-of-bounds access vulnerability in the frequency modulation module.Feb 6, 2026
CVE-2026-24920Medium 5.5Permission control vulnerability in the AMS module.Feb 6, 2026
CVE-2026-24919Medium 5.5Out-of-bounds write vulnerability in the DFX module.Feb 6, 2026
CVE-2026-24918Medium 5.5Address read vulnerability in the communication module.Feb 6, 2026
CVE-2026-24917Medium 5.5UAF vulnerability in the security module.Feb 6, 2026
CVE-2025-68970Medium 5.5Permission verification bypass vulnerability in the media library module.Jan 14, 2026
CVE-2025-68963Medium 5.3Man-in-the-middle attack vulnerability in the Clone module.Jan 14, 2026
CVE-2025-68959Medium 5.5Permission verification bypass vulnerability in the media library module.Jan 14, 2026
CVE-2025-66329Medium 5.5Permission control vulnerability in the window management module.Dec 8, 2025
CVE-2025-66325Medium 5.5Permission control vulnerability in the package management module.Dec 8, 2025
CVE-2025-58311High 7.1UAF vulnerability in the USB driver module.Nov 28, 2025
CVE-2025-58302Medium 5.5Permission control vulnerability in the Settings module.Nov 28, 2025
CVE-2025-58314High 7.1Vulnerability of accessing invalid memory in the component driver module.Nov 28, 2025
CVE-2025-58276Medium 5.5Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability.Sep 5, 2025

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.