CVE-2026-28549 PUBLISHED

Assigner: huawei
Reserved: 28.02.2026 Published: 05.03.2026 Updated: 05.03.2026

Race condition vulnerability in the permission management service. Impact: Successful exploitation of this vulnerability may affect availability.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
CVSS Score: 6.6

Product Status

Vendor Huawei
Product HarmonyOS
Versions Default: unaffected
  • Version 6.0.0 is affected

References

Problem Types

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CWE