Read the docs

Honor

Records53All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high19CVSS 7.0–8.9

Exploited now

Honor records in CISA KEV

No Honor vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

53 records

Priority HIGH 73

Several services in Honor Device Co., Ltd Honor PC Manager v16.0.0.118 was discovered to connect services to the named pipe iMateBookAssistant with default or overly permissive security attributes, leading to a privilege…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00424 Published 2025-06-30 No fix listed CWE-276
Priority MEDIUM 41

There is a whitelist mechanism bypass in GameCenter ,successful exploitation of this vulnerability may affect service confidentiality and integrity.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00343 Published 2025-04-17 Fixed in 16.0.23.304 CWE-290
Priority MEDIUM 41

Phoneservice module is affected by code injection vulnerability, successful exploitation of this vulnerability may affect service confidentiality and integrity.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00353 Published 2025-04-17 Fixed in 11.0.0.276 CWE-94
Priority LOW 36

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.00158 Published 2023-12-29 Fixed in 6.1.0.212 CWE-269
TI-2026-23936 CVE-2026-31368 · GHSA-jm5q-gx4v-rpxq

Privilege Bypass in AiAssistant

Priority LOW 35

AiAssistant is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00144 Published 2026-04-21 No fix listed CWE-269
Priority LOW 33

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00305 Published 2023-12-29 Fixed in 7.60.10.303 CWE-269
Priority LOW 33

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00282 Published 2023-12-29 Fixed in 7.0.0.193 CWE-269
Priority LOW 33

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00305 Published 2023-12-29 Fixed in 7.2.0.102 CWE-269
Priority LOW 33

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00341 Published 2023-12-29 Fixed in 7.1.0.74 CWE-269
Priority LOW 31

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file

CVSS 3.1HIGH 7.3 Local No auth No interaction EPSS 0.00113 Published 2023-12-29 Fixed in 7.1.0.100 CWE-347
Priority LOW 31

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file.

CVSS 3.1HIGH 7.3 Local No auth No interaction EPSS 0.00113 Published 2023-12-29 Fixed in 7.0.0.157 CWE-347
Priority LOW 31

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file.

CVSS 3.1HIGH 7.3 Local No auth No interaction EPSS 0.00119 Published 2023-12-29 Fixed in 7.0.0.157 CWE-347
Priority LOW 30

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00111 Published 2023-12-29 Fixed in 7.1.0.137 CWE-347
Priority LOW 30

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00113 Published 2023-12-29 Fixed in 7.0.0.157 CWE-347
TI-2026-23938 CVE-2026-31370 · GHSA-mj74-pwgm-79gv

Information Leak Vulnerability in Honor E

Priority LOW 27

Honor E APP is affected by information leak vulnerability, successful exploitation of this vulnerability may affect service confidentiality.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00192 Published 2026-04-21 No fix listed CWE-200
Load more
Open these records in search →