5.2
CVE-2026-41984
- EPSS 0.08%
- Veröffentlicht 09.06.2026 06:42:20
- Zuletzt bearbeitet 09.06.2026 13:34:58
- Quelle psirt@huawei.com
- CVE-Watchlists
- Unerledigt
UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerHuawei
≫
Produkt
HarmonyOS
Default Statusunaffected
Version
6.1.0
Status
affected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.08% | 0.002 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| psirt@huawei.com | 5.2 | 0.5 | 4.7 |
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H
|
CWE-284 Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
https://consumer.huawei.com/en/support/bulletin/2026/6/
https://consumer.huawei.com/en/support/bulletinlaptops/2026/6/
https://consumer.huawei.com/en/support/bulletinwearables/2026/6/