CVE-2024-41157
- EPSS 0.07%
- Veröffentlicht 02.09.2024 05:15:16
- Zuletzt bearbeitet 04.09.2024 16:30:40
in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use after free.
CVE-2024-41160
- EPSS 0.05%
- Veröffentlicht 02.09.2024 05:15:16
- Zuletzt bearbeitet 09.09.2024 12:21:53
in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use after free.
CVE-2024-28044
- EPSS 0.07%
- Veröffentlicht 02.09.2024 05:15:15
- Zuletzt bearbeitet 04.09.2024 17:12:54
in OpenHarmony v4.1.0 and prior versions allow a local attacker cause crash through integer overflow.
CVE-2024-38382
- EPSS 0.09%
- Veröffentlicht 02.09.2024 05:15:15
- Zuletzt bearbeitet 04.09.2024 17:10:56
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read.
CVE-2024-38386
- EPSS 0.07%
- Veröffentlicht 02.09.2024 05:15:15
- Zuletzt bearbeitet 04.09.2024 16:56:41
in OpenHarmony v4.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write.
CVE-2024-39612
- EPSS 0.09%
- Veröffentlicht 02.09.2024 05:15:15
- Zuletzt bearbeitet 04.09.2024 16:38:56
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read.
CVE-2024-37077
- EPSS 1.96%
- Veröffentlicht 02.07.2024 09:15:19
- Zuletzt bearbeitet 21.11.2024 09:23:08
in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write.
CVE-2024-37185
- EPSS 1.96%
- Veröffentlicht 02.07.2024 09:15:19
- Zuletzt bearbeitet 21.11.2024 09:23:22
in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds write.
CVE-2024-31071
- EPSS 0.05%
- Veröffentlicht 02.07.2024 09:15:18
- Zuletzt bearbeitet 21.11.2024 09:12:47
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause apps crash through type confusion.
CVE-2024-36243
- EPSS 1.96%
- Veröffentlicht 02.07.2024 09:15:18
- Zuletzt bearbeitet 21.11.2024 09:21:55
in OpenHarmony v4.0.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps through out-of-bounds read and write.