Huawei HarmonyOS Improper Permission Control Vulnerability in Window Management Module

A vulnerability has been identified in the window management module of Huawei's HarmonyOS. This issue arises from improper permission control, which could be exploited to affect the confidentiality of services. The vulnerability is present in multiple versions of HarmonyOS, including 4.2.0, 4.0.0, 3.0.0, 3.1.0, as well as various EMUI versions.

Impact

Exploitation of this vulnerability may lead to unauthorized access to sensitive information, potentially allowing for confidential data to be exposed or misused.

Remediation

Users can refer to the January 2025 Huawei Security Bulletin for guidance on applying the latest security updates that address this vulnerability.