CVE-2026-49309

Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Scoring

Severity

MEDIUM

CVSS base score

4.8

CVSS vector

CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N

EPSS probability

0.08%

CWE

CWE-264

Published

2026-09-09

Last modified

2026-09-09

Affected products

• Huawei HarmonyOS
• Huawei HarmonyOS
• Huawei HarmonyOS
• Huawei HarmonyOS
• Huawei HarmonyOS
• Huawei EMUI
• Huawei EMUI
• Huawei EMUI

Weakness type

• CWE-264

Related vulnerabilities

• CVE-2026-49313 — Permission control vulnerability in the app lock module....
• CVE-2026-41987 — Permission control vulnerability in the app management module....
• CVE-2026-49315 — DoS vulnerability in the input device module....
• CVE-2026-81644 — DoS vulnerability in the preview service module....
• CVE-2026-49312 — Permission control vulnerability in the window module....
• CVE-2026-49310 — Permission control vulnerability in the event notification module....
• CVE-2026-49303 — Permission control vulnerability in the notification module. Impact: Successful exploitation of...
• CVE-2026-49308 — Permission control vulnerability in the clipboard module. Impact: Successful exploitation of this...

Markdown version · Browse all CVEs