{"cves":{"cve":{"cveNumber":"CVE-2026-49309","cveUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-49309"}},"description":"Huawei HarmonyOS是华为自主研发的面向全场景的分布式操作系统‌，Huawei EMUI是华为基于Android开发的情感化操作系统。\n\nHuawei HarmonyOS/EMUI存在权限控制漏洞，该漏洞源于设置模块权限控制不当，攻击者可利用该漏洞影响服务机密性。","formalWay":"目前厂商已发布升级程序修复该安全问题，详情见厂商官网:\r\nhttps://consumer.huawei.com/en/support/bulletin/2026/9/","isEvent":"通用软硬件漏洞","number":"CNVD-2026-37866","openTime":"2026-09-18","patchDescription":"Huawei HarmonyOS是华为自主研发的面向全场景的分布式操作系统‌，Huawei EMUI是华为基于Android开发的情感化操作系统。\r\n\r\nHuawei HarmonyOS/EMUI存在权限控制漏洞，该漏洞源于设置模块权限控制不当，攻击者可利用该漏洞影响服务机密性。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。","patchName":"Huawei HarmonyOS/EMUI权限控制漏洞（CNVD-2026-37866）的补丁","products":{"product":["Huawei HarmonyOS 4.0.0","Huawei HarmonyOS 4.2.0","Huawei EMUI 14.0.0","Huawei HarmonyOS 4.3.0","Huawei HarmonyOS 4.3.1","Huawei EMUI 15.0.0","Huawei EMUI 14.2.0","Huawei HarmonyOS 4.3.3","Huawei EMUI 16.0.0"]},"referenceLink":"https://nvd.nist.gov/vuln/detail/CVE-2026-49309","serverity":"中","submitTime":"2026-09-16","title":"Huawei HarmonyOS/EMUI权限控制漏洞（CNVD-2026-37866）"}