Description
in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenHarmony | OpenHarmony | v5.0.3 – ≤ v6.0 | — |
High · 8.8
CVE-2026-27648
EUVD-2026-30829GHSA-fpp4-pf9w-p6rr
web_webview has an out-of-bounds write vulnerability
Published May 19, 2026 · Updated May 19, 2026 · Assigned by OpenHarmony