Vulnerabilities (CVE)

Filtered by CWE-264
Total 5272 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-48903 1 Huawei 1 Harmonyos 2026-06-17 N/A 7.8 HIGH
Permission bypass vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2025-46587 1 Huawei 1 Harmonyos 2026-06-17 N/A 6.2 MEDIUM
Permission control vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-20145 1 Cisco 9 8608, 8804, 8808 and 6 more 2026-06-17 N/A 5.8 MEDIUM
A vulnerability in the access control list (ACL) processing in the egress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability exists because certain packets are handled incorrectly when they are received on an ingress interface on one line card and destined out of an egress interface on another line card where the egress ACL is configured. An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to bypass an egress ACL on the affected device. For more information about this vulnerability, see the section of this advisory. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
CVE-2024-5465 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 5.9 MEDIUM
Function vulnerabilities in the Calendar module Impact: Successful exploitation of this vulnerability will affect availability.
CVE-2024-56444 1 Huawei 1 Harmonyos 2026-06-17 N/A 7.5 HIGH
Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2024-56440 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 6.2 MEDIUM
Permission control vulnerability in the Connectivity module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
CVE-2024-54104 1 Huawei 1 Harmonyos 2026-06-17 N/A 6.2 MEDIUM
Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2024-54103 1 Huawei 1 Harmonyos 2026-06-17 N/A 6.1 MEDIUM
Vulnerability of improper access control in the album module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2024-53011 1 Qualcomm 166 Fastconnect 6700, Fastconnect 6700 Firmware, Fastconnect 6900 and 163 more 2026-06-17 N/A 7.9 HIGH
Information disclosure may occur due to improper permission and access controls to Video Analytics engine.
CVE-2024-51527 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 5.1 MEDIUM
Permission control vulnerability in the Gallery app Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2024-51524 1 Huawei 1 Harmonyos 2026-06-17 N/A 4.0 MEDIUM
Permission control vulnerability in the Wi-Fi module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2024-45449 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 5.1 MEDIUM
Access permission verification vulnerability in the ringtone setting module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2024-45442 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 5.1 MEDIUM
Vulnerability of permission verification for APIs in the DownloadProviderMain module Impact: Successful exploitation of this vulnerability will affect availability.
CVE-2024-43064 1 Qualcomm 60 Qam8255p, Qam8255p Firmware, Qam8295p and 57 more 2026-06-17 N/A 7.5 HIGH
Uncontrolled resource consumption when a driver, an application or a SMMU client tries to access the global registers through SMMU.
CVE-2024-39670 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 6.2 MEDIUM
Privilege escalation vulnerability in the account synchronisation module. Impact: Successful exploitation of this vulnerability will affect availability.
CVE-2024-32996 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 6.2 MEDIUM
Privilege escalation vulnerability in the account module Impact: Successful exploitation of this vulnerability will affect availability.
CVE-2024-22452 1 Dell 1 Display And Peripheral Manager 2026-06-17 N/A 7.3 HIGH
Dell Display and Peripheral Manager for macOS prior to 1.3 contains an improper access control vulnerability. A low privilege user could potentially exploit this vulnerability by modifying files in the installation folder to execute arbitrary code, leading to privilege escalation.
CVE-2024-21469 1 Qualcomm 448 9205 Lte Modem, 9205 Lte Modem Firmware, Aqt1000 and 445 more 2026-06-17 N/A 7.3 HIGH
Memory corruption when an invoke call and a TEE call are bound for the same trusted application.
CVE-2024-20371 2026-06-17 N/A 5.3 MEDIUM
A vulnerability in the access control list (ACL) programming of Cisco Nexus 3550-F Switches could allow an unauthenticated, remote attacker to send traffic that should be blocked to the management interface of an affected device.  This vulnerability exists because ACL deny rules are not properly enforced at the time of device reboot. An attacker could exploit this vulnerability by attempting to send traffic to the management interface of an affected device. A successful exploit could allow the attacker to send traffic to the management interface of the affected device.
CVE-2024-20370 2026-06-17 N/A 6.0 MEDIUM
A vulnerability in the Cisco FXOS CLI feature on specific hardware platforms for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to elevate their administrative privileges to root. The attacker would need valid administrative credentials on the device to exploit this vulnerability. This vulnerability exists because certain system configurations and executable files have insecure storage and permissions. An attacker could exploit this vulnerability by authenticating on the device and then performing a series of steps that includes downloading malicious system files and accessing the Cisco FXOS CLI to configure the attack. A successful exploit could allow the attacker to obtain root access on the device.