Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-20046
High · 8.8
CWE-264 Mar 11, 2026
Cisco IOS XR Software CLI Privilege Escalation Vulnerability
A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges and gain full administrative control of an affected device.
This vulnerability is due to incorrect mapping of a command to task groups within the source code. An attacker with a low-privileged account could exploit this vulnerability by using the CLI command to bypass the task group–based checks. A successful exploit could allow the attacker to elevate privileges and perform actions on an affected device without authorization checks.
CVE-2026-28541
Medium · 5.5
CWE-264 Mar 5, 2026
Permissions, Privileges, and Access Controls in Huawei Harmonyos
Permission control vulnerability in the cellular_data module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2025-66319
Medium · 5.5
CWE-264 Mar 5, 2026
Permissions, Privileges, and Access Controls in Huawei Harmonyos
Permission control vulnerability in the resource scheduling module. Impact: Successful exploitation of this vulnerability may affect service integrity.
CVE-2026-24924
Medium · 5.5
CWE-264 Feb 6, 2026
Permissions, Privileges, and Access Controls in Huawei Harmonyos
Vulnerability of improper permission control in the print module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2026-24920
Medium · 5.5
CWE-264 Feb 6, 2026
Permissions, Privileges, and Access Controls in Huawei Emui
Permission control vulnerability in the AMS module.
Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2026-24931
Medium · 5.5
CWE-264 Feb 6, 2026
Permissions, Privileges, and Access Controls in Huawei Harmonyos
Vulnerability of improper criterion security check in the card module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2026-24923
Medium · 5.5
CWE-264 Feb 6, 2026
Permissions, Privileges, and Access Controls in Huawei Harmonyos
Permission control vulnerability in the HDC module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-68967
Medium · 5.5
CWE-264 Jan 14, 2026
Permissions, Privileges, and Access Controls in Huawei Harmonyos
Vulnerability of improper permission control in the print module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-66329
Medium · 5.5
CWE-264 Dec 8, 2025
Permissions, Privileges, and Access Controls in Huawei Emui
Permission control vulnerability in the window management module. Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2025-66325
Medium · 5.5
CWE-264 Dec 8, 2025
Permissions, Privileges, and Access Controls in Huawei Emui
Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58302
Medium · 5.5
CWE-264 Nov 28, 2025
Permission control vulnerability in the Settings module.
Impact: Successful exploitation of this...
Permission control vulnerability in the Settings module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-64315
High · 7.1
CWE-264 Nov 28, 2025
Permissions, Privileges, and Access Controls in Huawei Harmonyos
Configuration defect vulnerability in the file management module.
Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity.
CVE-2025-58315
Medium · 5.5
CWE-264 Nov 28, 2025
Permissions, Privileges, and Access Controls in Huawei Harmonyos
Permission control vulnerability in the Wi-Fi module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58312
Medium · 5.5
CWE-264 Nov 28, 2025
Permissions, Privileges, and Access Controls in Huawei Harmonyos
Permission control vulnerability in the App Lock module.
Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2025-58309
High · 7.1
CWE-264 Nov 28, 2025
Permissions, Privileges, and Access Controls in Huawei Harmonyos
Permission control vulnerability in the startup recovery module.
Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.
CVE-2025-58294
Medium · 5.5
CWE-264 Nov 28, 2025
Permissions, Privileges, and Access Controls in Huawei Harmonyos
Permission control vulnerability in the print module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58293
Medium · 5.5
CWE-264 Oct 11, 2025
Permissions, Privileges, and Access Controls in Huawei Harmonyos
Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may affect availability.
CVE-2025-58285
Medium · 5.5
CWE-264 Oct 11, 2025
Permissions, Privileges, and Access Controls in Huawei Harmonyos
Permission control vulnerability in the media module. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58284
Medium · 5.5
CWE-264 Oct 11, 2025
Permissions, Privileges, and Access Controls in Huawei Harmonyos
Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58283
Medium · 5.5
CWE-264 Oct 11, 2025
Permissions, Privileges, and Access Controls in Huawei Harmonyos
Permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-58282
Medium · 5.5
CWE-264 Oct 11, 2025
Permissions, Privileges, and Access Controls in Huawei Harmonyos
Permission control vulnerability in the camera module. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2025-54654
Medium · 5.5
CWE-264 Oct 10, 2025
Permissions, Privileges, and Access Controls in Huawei Harmonyos
Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality
CVE-2025-58276
Medium · 5.5
CWE-264 Sep 5, 2025
Permission verification vulnerability in the home screen module
Impact: Successful exploitation...
Permission verification vulnerability in the home screen module
Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2023-2255
Medium · 5.3
CWE-264 May 25, 2023
Remote documents loaded without prompt via IFrame
Improper access control in editor components of The Document Foundation LibreOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of LibreOffice documents that used "floating frames" linked to external files, would load the contents of those frames without prompting the user for permission to do so. This was inconsistent with the treatment of other linked content in LibreOffice. This issue affects: The Document Foundation LibreOffice 7.4 versions prior to 7.4.7; 7.5 versions prior to 7.5.3.
CVE-2016-3643
High · 7.8
KEV High · 62 Public exploit CWE-264 Jun 17, 2016
SolarWinds Virtualization Manager Privilege Escalation Vulnerability
SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by "sudo cat /etc/passwd."