HDC module permission control flaw compromises confidentiality
CVE-2026-24923 Published on February 6, 2026

Permission control vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

NVD

Vulnerability Analysis

Attack Vector:
ADJACENT_NETWORK
Attack Complexity:
HIGH
Privileges Required:
HIGH
User Interaction:
REQUIRED
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Weakness Type

Permissions, Privileges, and Access Controls

Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.


Products Associated with CVE-2026-24923

Want to know whenever a new CVE is published for Huawei Harmonyos? stack.watch will email you.

Huawei Harmonyos
 

Affected Versions

Huawei HarmonyOS Version 6.0.0 is affected by CVE-2026-24923

Exploit Probability

EPSS
0.01%
Percentile
0.67%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.