Huawei HarmonyOS June 2026 Security Advisory: Multiple CVEs in Network, Package, and Browser Modules

Vulnerability Overview Huawei released its June 2026 security update, which includes Huawei patches and third-party library patches. Below is the detailed vulnerability information: Huawei Patches 1. CVE-2026-41975 - Vulnerability Description: Privilege management vulnerability in the Network Management module - Impact: Successful exploitation of this vulnerability may affect service integrity - Severity: Medium - Affected Versions: HarmonyOS 6.1.0, HarmonyOS 6.0.0 2. CVE-2026-41978 - Vulnerability Description: Privilege control vulnerability in the Clone module - Impact: Successful exploitation of this vulnerability may affect service confidentiality - Severity: Medium - Affected Versions: HarmonyOS 6.1.0, HarmonyOS 6.0.0 3. CVE-2026-41979 - Vulnerability Description: Privilege control vulnerability in the Print module - Impact: Successful exploitation of this vulnerability may affect service integrity and confidentiality - Severity: Medium - Affected Versions: HarmonyOS 6.1.0, HarmonyOS 6.0.0 4. CVE-2026-41980 - Vulnerability Description: Privilege control vulnerability in the File Preview module - Impact: Successful exploitation of this vulnerability may affect service confidentiality - Severity: Medium - Affected Versions: HarmonyOS 6.1.0, HarmonyOS 6.0.0 5. CVE-2026-41983 - Vulnerability Description: Denial of Service (DoS) vulnerability in the Browser Engine - Impact: Successful exploitation of this vulnerability may affect service availability - Severity: Medium - Affected Versions: HarmonyOS 6.1.0, HarmonyOS 6.0.0 6. CVE-2026-41984 - Vulnerability Description: Use-After-Free (UAF) vulnerability in the Package Management module - Impact: Successful exploitation of this vulnerability may affect service integrity - Severity: Medium - Affected Versions: HarmonyOS 6.1.0 7. CVE-2026-41985 - Vulnerability Description: Use-After-Free (UAF) vulnerability in the Package Management module - Impact: Successful exploitation of this vulnerability may affect service integrity - Severity: Medium - Affected Versions: HarmonyOS 6.1.0 8. CVE-2026-41986 - Vulnerability Description: File system logical bypass vulnerability - Impact: Successful exploitation of this vulnerability may affect service availability - Severity: Medium - Affected Versions: HarmonyOS 6.1.0, HarmonyOS 6.0.0 Third-Party Library Patches 1. CVE-2026-31799 - Severity: Critical - Affected Versions: HarmonyOS 6.1.0, HarmonyOS 6.0.0 2. CVE-2026-28387 - Severity: High - Affected Versions: HarmonyOS 6.1.0, HarmonyOS 6.0.0 3. CVE-2026-28388 - Severity: High - Affected Versions: HarmonyOS 6.1.0, HarmonyOS 6.0.0 4. CVE-2026-28389 - Severity: High - Affected Versions: HarmonyOS 6.1.0, HarmonyOS 6.0.0 5. CVE-2026-28390 - Severity: High - Affected Versions: HarmonyOS 6.1.0, HarmonyOS 6.0.0 6. CVE-2026-31790 - Severity: High - Affected Versions: HarmonyOS 6.1.0, HarmonyOS 6.0.0 Scope of Impact Huawei Patches: Affects HarmonyOS versions 6.1.0 and 6.0.0. Third-Party Library Patches: Also affects HarmonyOS versions 6.1.0 and 6.0.0. Remediation Huawei Patches: Huawei has released corresponding security updates. Users are advised to update their systems promptly to fix these vulnerabilities. Third-Party Library Patches: Huawei has updated the third-party libraries. Users should ensure their systems are updated to the latest version to receive the fixes. POC Code or Exploitation Code No specific POC code or exploitation code is provided on the page.

Goal Reached Thanks to every supporter — we hit 100%!

Huawei HarmonyOS June 2026 Security Advisory: Multiple CVEs in Network, Package, and Browser Modules