CVE-2022-44560

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

The launcher module has an Intent redirection vulnerability. Successful exploitation of this vulnerability may cause launcher module data to be modified.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-601

Affected software

Vendor	Product	Versions
Huawei	HarmonyOS	2.0
Huawei	EMUI	12.0.1; 12.0.0; 11.0.1

References

https://consumer.huawei.com/en/support/bulletin/2022/11/Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433Vendor Advisory
https://consumer.huawei.com/en/support/bulletin/2022/11/Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433Vendor Advisory

Timeline

Published: Nov 9, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-445617.5The preset launcher module has a permission verification vulnerability. Successful exploitation of this vulnerability makes unauthorized app CVE-2022-445629.8The system framework layer has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may CVE-2022-445635.9There is a race condition vulnerability in SD upgrade mode. Successful exploitation of this vulnerability may affect data confidentiality.CVE-2022-445647.8Huawei Aslan Children's Watch has a path traversal vulnerability. Successful exploitation may allow attackers to access or modify protected CVE-2022-445655.3An improper access validation vulnerability exists in airMAX AC <8.7.11, airFiber 60/LR <2.6.2, airFiber 60 XG/HD <v1.0.0 and airFiber GBE <CVE-2022-445667.5A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outside the range for a 6 CVE-2022-445679.8A command injection vulnerability exists in Rocket.Chat-Desktop <3.8.14 that could allow an attacker to pass a malicious url of openInternal CVE-2022-445697.8A locally authenticated attacker with low privileges can bypass authentication due to insecure inter-process communication.CVE-2022-44575.5Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijacking attack. An atta CVE-2022-445707.5A denial of service vulnerability in the Range header parsing component of Rack >= 1.5.0. A Carefully crafted input can cause the Range head CVE-2022-445717.5There is a denial of service vulnerability in the Content-Disposition parsingcomponent of Rack fixed in 2.0.9.2, 2.1.4.2, 2.2.4.1, 3.0.0.1. CVE-2022-445727.5A denial of service vulnerability in the multipart parsing component of Rack fixed in 2.0.9.2, 2.1.4.2, 2.2.4.1 and 3.0.0.1 could allow an a