Vendor
Huawei
1,420 known vulnerabilities.
Huawei at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 17 | 0 |
| Oct 2026 | 3 | 0 |
| Sep 2026 | 12 | 0 |
| Aug 2026 | 10 | 0 |
| Jul 2026 | 11 | 0 |
| Jun 2026 | 15 | 0 |
| May 2026 | 12 | 0 |
| Apr 2026 | 20 | 1 |
| Mar 2026 | 18 | 1 |
| Feb 2026 | 18 | 0 |
| Jan 2026 | 16 | 0 |
| Dec 2025 | 16 | 0 |
| Nov 2025 | 19 | 1 |
| Oct 2025 | 21 | 0 |
| Sep 2025 | 5 | 0 |
| Aug 2025 | 52 | 0 |
| Jul 2025 | 21 | 0 |
| Jun 2025 | 12 | 0 |
| May 2025 | 11 | 0 |
| Apr 2025 | 20 | 0 |
| Mar 2025 | 10 | 0 |
| Feb 2025 | 10 | 0 |
| Jan 2025 | 28 | 0 |
| Dec 2024 | 54 | 1 |
Products
Latest advisories
-
High max 8.1
OpenSSH: Schwachstelle ermöglicht Codeausführung
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in OpenSSH ausnutzen, um beliebigen Programmcode mit root Rechten auszuführen.
first Jun 30, 2024 -
High max 7.5WID-SEC-2026-1545 1 CVE
Huawei Router: Schwachstelle ermöglicht Offenlegung von Informationen und Admin-Zugriff
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Huawei Router ausnutzen, um Informationen offenzulegen, die einen administrativen Zugriff ermöglichen.
-
Medium
OpenSSL: Mehrere Schwachstellen
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenSSL ausnutzen, um einen Denial of Service Angriff durchzuführen oder um Sicherheitsmechanismen zu umgehen.
first Mar 27, 2018 -
Medium max 5.6
Meltdown und Spectre: Mehrere Schwachstellen
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in den meisten der aktuellen Prozessoren ausnutzen, um Sicherheitsmechanismen zu umgehen und physikalischen Speicher auszulesen.
first Jan 3, 2018 -
Critical max 10.0
Apache ActiveMQ: Schwachstelle ermöglicht Codeausführung
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache ActiveMQ ausnutzen, um beliebigen Programmcode auszuführen.
first Oct 29, 2023
1,420 results · Feed
-
Medium 5.5
Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may aff…
-
Medium 6.6
Permission control vulnerability in the autofill service module. Impact: Successful exploitation of this vulnerability …
-
Low 3.7
Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may aff…
-
Medium 5.7
DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.
-
Medium 6.5
DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.
-
High 7.1
Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this v…
-
High 7.5
DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability.
-
Medium 5.9
OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect servi…
-
Medium 5.9
UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect avai…
-
Medium 5.9
Race condition vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may …
-
Medium 5.5
Permission control vulnerability in the WLAN module. Impact: Successful exploitation of this vulnerability may affect …
-
Medium 4.3
DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availabi…
-
Medium 4.7
Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may aff…
-
Medium 4.3
Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may …
-
Low 3.6
Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vuln…
-
Medium 4.0
DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availabi…
-
Medium 6.2
Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affe…
-
Low 3.5
Huawei malicious on-bus PLDM or NCSI device can drive out-of-bounds-heap reads via short MCTP responses
The openUBMC device-management process parses PLDM-over-MCTP and NCSI-over-MCTP responses from on-bus devices, and three response parsers in the shared transport libraries subtract a fixed header or reserved-field size from a device-supplied response length w…
-
Medium 5.4
Huawei openUBMC low-privilege SNMP to administrator privilege escalation
openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers. An authenticated, but low-privilege, SNMP user can therefore invoke mapped backend operations as an administrative identity. In `route_mapper/account.lua`, `get_user_privi…
-
High 8.6
Huawei Default SNMPv3 USM key
Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key (recoverable from the open-source build) can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit that still c…
-
Medium 5.9
Out-of-bounds read vulnerability in the graphics module. Successful exploitation of this vulnerability may affect avail…
-
Medium 5.5
Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vulnerability may affe…
-
Medium 4.8
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affe…
-
Medium 6.2
Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability ma…
-
High 7.1
DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availabi…
-
Medium 5.3
Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affe…
-
Medium 5.9
Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affe…
-
Medium 4.3
DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect avail…
-
Medium 4.0
Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect…
-
High 8.6
Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerabilit…
-
High 7.3
OOB write vulnerability in the rendering and composition module. Impact: Successful exploitation of this vulnerability …
-
Medium 6.2
Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability…
-
Medium 5.1
Permission control vulnerability in the notification module. Impact: Successful exploitation of this vulnerability may …
-
Medium 6.2
Permission control vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affec…
-
Medium 6.2
Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful exploitation of this vulnerability…
-
Medium 5.5
Permission control vulnerability in the clipboard module. Impact: Successful exploitation of this vulnerability may aff…
-
Low 3.3
UAF vulnerability in the time and time zone module. Impact: Successful exploitation of this vulnerability may affect av…
-
Medium 6.2
Permission control vulnerability in the device key management module. Impact: Successful exploitation of this vulnerabi…
-
Medium 6.2
Permission control vulnerability in the notification service module. Impact: Successful exploitation of this vulnerabil…
-
Medium 4.0
Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may aff…