cnvd-2026-37866

cnvd

Description

Huawei HarmonyOS是华为自主研发的面向全场景的分布式操作系统‌，Huawei EMUI是华为基于Android开发的情感化操作系统。 Huawei HarmonyOS/EMUI存在权限控制漏洞，该漏洞源于设置模块权限控制不当，攻击者可利用该漏洞影响服务机密性。

Timeline

Published: unknown
Last Modified: unknown

CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2026-49309",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2026-49309"
    }
  },
  "description": "Huawei HarmonyOS是华为自主研发的面向全场景的分布式操作系统‌，Huawei EMUI是华为基于Android开发的情感化操作系统。\n\nHuawei HarmonyOS/EMUI存在权限控制漏洞，该漏洞源于设置模块权限控制不当，攻击者可利用该漏洞影响服务机密性。",
  "formalWay": "目前厂商已发布升级程序修复该安全问题，详情见厂商官网:\r\nhttps://consumer.huawei.com/en/support/bulletin/2026/9/",
  "isEvent": "通用软硬件漏洞",
  "number": "CNVD-2026-37866",
  "openTime": "2026-09-18",
  "patchDescription": "Huawei HarmonyOS是华为自主研发的面向全场景的分布式操作系统‌，Huawei EMUI是华为基于Android开发的情感化操作系统。\r\n\r\nHuawei HarmonyOS/EMUI存在权限控制漏洞，该漏洞源于设置模块权限控制不当，攻击者可利用该漏洞影响服务机密性。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。",
  "patchName": "Huawei HarmonyOS/EMUI权限控制漏洞（CNVD-2026-37866）的补丁",
  "products": {
    "product": [
      "Huawei HarmonyOS 4.0.0",
      "Huawei HarmonyOS 4.2.0",
      "Huawei EMUI 14.0.0",
      "Huawei HarmonyOS 4.3.0",
      "Huawei HarmonyOS 4.3.1",
      "Huawei EMUI 15.0.0",
      "Huawei EMUI 14.2.0",
      "Huawei HarmonyOS 4.3.3",
      "Huawei EMUI 16.0.0"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2026-49309",
  "serverity": "中",
  "submitTime": "2026-09-16",
  "title": "Huawei HarmonyOS/EMUI权限控制漏洞（CNVD-2026-37866）"
}

View JSON API Download JSON

cnvd-2026-37866

Raw JSON Data