CVE-2021-22470

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A component of the HarmonyOS has a Privileges Controls vulnerability. Local attackers may exploit this vulnerability to expand the Recording Trusted Domain.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
HuaweiHarmonyOS2.0

References

Timeline

Published
Oct 28, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-224715.5A component of the HarmonyOS has a NULL Pointer Dereference vulnerability. Local attackers may exploit this vulnerability to cause nearby prCVE-2021-224727.5There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidCVE-2021-224737.5There is an Authentication vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentialiCVE-2021-224749.8There is an Out-of-bounds memory access in Huawei Smartphone.Successful exploitation of this vulnerability may cause process exceptions.CVE-2021-224755.3There is an Improper permission management vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect serviCVE-2021-224785.5The interface of a certain HarmonyOS module has a UAF vulnerability. Successful exploitation of this vulnerability may lead to information lCVE-2021-224795.5The interface of a certain HarmonyOS module has an invalid address access vulnerability. Successful exploitation of this vulnerability may lCVE-2021-224810.0Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server). The supported version that is affectCVE-2021-224809.8The interface of a certain HarmonyOS module has an integer overflow vulnerability. Successful exploitation of this vulnerability may lead toCVE-2021-224817.5There is a Verification errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentCVE-2021-224825.3There is an Uninitialized variable vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause transmission oCVE-2021-224837.5There is a issue of IP address spoofing in Huawei Smartphone. Successful exploitation of this vulnerability may cause DoS.
CVE-2021-22470: High severity, CVSS 7.8 | Vulnix