How many CVEs does OpenHarmony have?

OpenHarmony has 177 published CVE records since 2022, including 83 in the last two years.

How many OpenHarmony CVEs are in CISA KEV?

None of OpenHarmony's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which OpenHarmony products have the most CVEs?

The OpenHarmony products with the most published CVEs are OpenHarmony, OpenHarmony v5.0.3 and prior versions, liteos_a, OpenHarmony v5.0.3.

What are the most common weakness types in OpenHarmony CVEs?

OpenHarmony's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-125 (Out-of-bounds Read), CWE-787 (Out-of-bounds Write), CWE-20 (Improper Input Validation).

Are there public exploits for OpenHarmony vulnerabilities?

No OpenHarmony CVEs currently have a tracked public exploit in this dataset.

How many critical OpenHarmony vulnerabilities are there?

OpenHarmony has 5 critical and 68 high-severity CVEs.

What is the average severity of OpenHarmony CVEs?

The average CVSS base score across OpenHarmony's scored CVEs is 6.6.

OpenHarmony Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: OpenHarmony vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Overview

OpenHarmony has 177 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.6.

Security scorecard

A quick read on OpenHarmony's vulnerability posture, as a share of its 177 published CVEs.

Average CVSS: 6.6
Critical / high: 41%
Actively exploited (KEV): 0%
Public exploit available: 0%
Patch available: 11%

Severity and exploitation

How the CVSS severity of OpenHarmony's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical5

High68

Medium97

Low7

In CISA’s Known Exploited Vulnerabilities catalog

None of OpenHarmony's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No OpenHarmony CVEs currently have a tracked public exploit.

Most affected products

The OpenHarmony products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in OpenHarmony CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish OpenHarmony CVE records.

OpenHarmony177 CVEs

Disclosure activity by year

How many OpenHarmony CVEs were published each year.

2022

2023

2024

2025

2026

Latest OpenHarmony CVEs

The most recently disclosed vulnerabilities affecting OpenHarmony.

kernel_linux_common_modules has a Race Condition vulnerability
CWE-364
Low · CVSS 3.3
EPSS 0.1%2026-05-19
filemanagement_storage_service has an use after free vulnerability
CWE-416
Medium · CVSS 6.5
EPSS 0.1%2026-05-19
multimedia_audio_framework has a Race Condition vulnerability
CWE-364
Medium · CVSS 5.5
EPSS 0.1%2026-05-19
filemanagement_storage_service has an improper preservation of permissions vulnerability

Other vendors

CVE counts for other vendors.

Cloud Foundry178 CVEs DrayTek177 CVEs dedecms177 CVEs MyBB177 CVEs Sophos176 CVEs owncloud176 CVEs Kashipara176 CVEs MIT176 CVEs

Browse all vendors

Frequently asked questions

Common questions about OpenHarmony vulnerabilities.

How many CVEs does OpenHarmony have?: OpenHarmony has 177 published CVE records since 2022, including 83 in the last two years.
How many OpenHarmony CVEs are in CISA KEV?: None of OpenHarmony's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which OpenHarmony products have the most CVEs?: The OpenHarmony products with the most published CVEs are OpenHarmony, OpenHarmony v5.0.3 and prior versions, liteos_a, OpenHarmony v5.0.3.
What are the most common weakness types in OpenHarmony CVEs?: OpenHarmony's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-125 (Out-of-bounds Read), CWE-787 (Out-of-bounds Write), CWE-20 (Improper Input Validation).
Are there public exploits for OpenHarmony vulnerabilities?: No OpenHarmony CVEs currently have a tracked public exploit in this dataset.
How many critical OpenHarmony vulnerabilities are there?: OpenHarmony has 5 critical and 68 high-severity CVEs.
What is the average severity of OpenHarmony CVEs?: The average CVSS base score across OpenHarmony's scored CVEs is 6.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track OpenHarmony vulnerabilities

Get an alert for each new OpenHarmony CVE, with AI-written analysis and remediation steps.

Create an account See pricing