Paper/Archive/CVE-2023-52378

CVE-2023-52378

Huawei HarmonyOS — Vulnerability of incorrect service logic in the WindowManagerServices module.Successful exploitation of this vulnerability may cause feat…

EPSS 0.5%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (ADP, NVD agree)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 39.7.397 × 207.9 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Vulnerability of incorrect service logic in the WindowManagerServices module.Successful exploitation of this vulnerability may cause features to perform abnormally.

Affected

ProductAffectedFixed inSource

HarmonyOS3.1.0–CNA

HarmonyOS3.0.0–CNA

EMUI13.0.0–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refconsumer.huawei.com/en/support/bulletin/2024/2 refdevice.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405