Huawei HarmonyOS/EMUI June 2026 Security Bulletin: CVE-2026-41972 to 41984

Vulnerability Overview Huawei has released security updates for June 2026, including patches for Huawei and third-party libraries. Key vulnerability information is as follows: Huawei Patches 1. CVE-2026-41972 - Vulnerability Description: Path traversal vulnerability in the SMS application - Impact: Successful exploitation of this vulnerability may affect availability - Severity: High - Affected Versions: HarmonyOS6.1.0, HarmonyOS6.0.0, HarmonyOS5.1.0 2. CVE-2026-41973 - Vulnerability Description: Permission control vulnerability in calls - Impact: Successful exploitation of this vulnerability may affect availability - Severity: Medium - Affected Versions: HarmonyOS4.3.1, HarmonyOS4.3.0, HarmonyOS4.2.0, HarmonyOS4.0.0, EMUI 15.0.0, EMUI 14.2.0, EMUI 14.0.0 3. CVE-2026-41974 - Vulnerability Description: Permission control vulnerability in service notifications - Impact: Successful exploitation of this vulnerability may affect availability - Severity: Medium - Affected Versions: HarmonyOS4.3.1, HarmonyOS4.3.0, HarmonyOS4.2.0, HarmonyOS4.0.0, EMUI 15.0.0, EMUI 14.2.0, EMUI 14.0.0 4. CVE-2026-41975 - Vulnerability Description: Administration vulnerability in the network management module - Impact: Successful exploitation of this vulnerability may affect service integrity - Severity: Medium - Affected Versions: HarmonyOS6.1.0, HarmonyOS6.0.0 5. CVE-2026-41976 - Vulnerability Description: Permission control vulnerability in the audio framework - Impact: Successful exploitation of this vulnerability may affect service confidentiality - Severity: Medium - Affected Versions: HarmonyOS4.3.1, HarmonyOS4.3.0, EMUI 15.0.0 6. CVE-2026-41977 - Vulnerability Description: DoS vulnerability in the logging service - Impact: Successful exploitation of this vulnerability may affect availability - Severity: Medium - Affected Versions: HarmonyOS4.3.1, HarmonyOS4.3.0, HarmonyOS4.2.0, HarmonyOS4.0.0, EMUI 15.0.0, EMUI 14.2.0, EMUI 14.0.0 7. CVE-2026-41979 - Vulnerability Description: Permission control vulnerability in the printing module - Impact: Successful exploitation of this vulnerability may affect integrity and confidentiality - Severity: Medium - Affected Versions: HarmonyOS6.1.0, HarmonyOS6.0.0 8. CVE-2026-41980 - Vulnerability Description: Permission control vulnerability in the file preview module - Impact: Successful exploitation of this vulnerability may affect service confidentiality - Severity: Medium - Affected Versions: HarmonyOS6.1.0, HarmonyOS6.0.0 9. CVE-2026-41981 - Vulnerability Description: Out-of-bounds write vulnerability in the IPC module - Impact: Successful exploitation of this vulnerability may affect availability - Severity: Medium - Affected Versions: HarmonyOS6.1.0, HarmonyOS6.0.0, HarmonyOS5.1.0 10. CVE-2026-41982 - Vulnerability Description: Race condition vulnerability in the IPC module - Impact: Successful exploitation of this vulnerability may affect availability - Severity: Medium - Affected Versions: HarmonyOS6.1.0, HarmonyOS6.0.0, HarmonyOS5.1.0 11. CVE-2026-41983 - Vulnerability Description: DoS vulnerability in the browser kernel - Impact: Successful exploitation of this vulnerability may affect availability - Severity: Medium - Affected Versions: HarmonyOS6.1.0, HarmonyOS6.0.0 12. CVE-2026-41984 - Vulnerability Description: UAF (Use-After-Free) vulnerability in the package management module - Impact: Successful exploitation of this vulnerability may affect service integrity - Severity: Medium - Affected Versions: HarmonyOS6.1.0 13. CVE-2026-41985 - Vulnerability Description: UAF (Use-After-Free) vulnerability in the package management module - Impact: Successful exploitation of this vulnerability may affect service integrity - Severity: Medium - Affected Versions: HarmonyOS6.1.0 14. CVE-2026-41986 - Vulnerability Description: File system logic bypass vulnerability - Impact: Successful exploitation of this vulnerability may affect availability - Severity: Medium - Affected Versions: HarmonyOS6.1.0, HarmonyOS6.0.0, HarmonyOS5.1.0 Third-Party Library Patches 1. CVE-2026-0073 - Severity: Critical - Affected Versions: HarmonyOS4.3.1, HarmonyOS4.3.0, HarmonyOS4.2.0, HarmonyOS4.0.0, EMUI 15.0.0, EMUI 14.2.0, EMUI 14.0.0 2. CVE-2025-51052 - Severity: Critical - Affected Versions: HarmonyOS5.1.0 3. CVE-2026-31789 - Severity: Critical - Affected Versions: HarmonyOS6.1.0, HarmonyOS6.0.0, HarmonyOS5.1.0 4. CVE-2025-48544 - Severity: High - Affected Versions: HarmonyOS4.3.1, HarmonyOS4.3.0, HarmonyOS4.2.0, HarmonyOS4.0.0, EMUI 15.0.0, EMUI 14.2.0, EMUI 14.0.0 5. CVE-2025-48574 - Severity: High - Affected Versions: HarmonyOS4.3.1, HarmonyOS4.3.0, HarmonyOS4.2.0, HarmonyOS4.0.0, EMUI 15.0.0, EMUI 14.2.0, EMUI 14.0.0 6. CVE-2026-0034 - Severity: High - Affected Versions: HarmonyOS4.3.1, HarmonyOS4.3.0, HarmonyOS4.2.0, HarmonyOS4.0.0, EMUI 15.0.0, EMUI 14.2.0, EMUI 14.0.0 7. CVE-2026-6314 - Severity: High - Affected Versions: HarmonyOS6.1.0, HarmonyOS6.0.0 8. CVE-2026-28387 - Severity: High - Affected Versi

Goal Reached Thanks to every supporter — we hit 100%!

Huawei HarmonyOS/EMUI June 2026 Security Bulletin: CVE-2026-41972 to 41984

More from this source