CVE-2026-28542 PUBLISHED

Assigner: huawei
Reserved: 28.02.2026 Published: 05.03.2026 Updated: 05.03.2026

Permission bypass vulnerability in the system service framework. Impact: Successful exploitation of this vulnerability may affect availability.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
CVSS Score: 7.3

Product Status

Vendor Huawei
Product HarmonyOS
Versions Default: unaffected
  • Version 4.2.0 is affected
  • Version 4.0.0 is affected
  • Version 3.1.0 is affected
Vendor Huawei
Product EMUI
Versions Default: unaffected
  • Version 14.2.0 is affected
  • Version 14.0.0 is affected
  • Version 13.0.0 is affected

References

Problem Types

  • CWE-755 Improper Handling of Exceptional Conditions CWE