Vulnerabilities (CVE)

Filtered by CWE-227
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-92963 2026-09-18 N/A 5.3 MEDIUM
vm2 versions before 3.11.2 fail to properly restrict access to the VM2_INTERNAL_STATE_DO_NOT_USE_OR_PROGRAM_WILL_FAIL global variable. Attackers can access this internal state object through globalThis to retrieve sensitive sandbox internals.
CVE-2024-56442 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 5.5 MEDIUM
Vulnerability of native APIs not being implemented in the NFC service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
CVE-2023-41293 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 7.5 HIGH
Data security classification vulnerability in the DDMP module. Successful exploitation of this vulnerability may affect confidentiality.