CVE-2023-34160

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the desktop to prevent them from being uninstalled.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-290

Affected software

Vendor	Product	Versions
Huawei	HarmonyOS	3.1.0; 3.0.0; 2.1.0; 2.0.0
Huawei	EMUI	13.0.0; 12.0.0

References

https://consumer.huawei.com/en/support/bulletin/2023/6/Vendor Advisory
https://consumer.huawei.com/en/support/bulletin/2023/6/Vendor Advisory

Timeline

Published: Jun 19, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-341617.5nappropriate authorization vulnerability in the SettingsProvider module.Successful exploitation of this vulnerability may cause features to CVE-2023-341627.5Version update determination vulnerability in the user profile module.Successful exploitation of this vulnerability may cause repeated HMS C CVE-2023-341637.5Permission control vulnerability in the window management module.Successful exploitation of this vulnerability may cause features to perform CVE-2023-341647.5Vulnerability of incomplete input parameter verification in the communication framework module. Successful exploitation of this vulnerabilit CVE-2023-341655.3Unauthorized access vulnerability in the Save for later feature provided by AI Touch.Successful exploitation of this vulnerability may cause CVE-2023-341667.5Vulnerability of system restart triggered by abnormal callbacks passed to APIs.Successful exploitation of this vulnerability may cause the s CVE-2023-341675.3Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app CVE-2023-341688.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alex Raven WP Report Post allows SQL I CVE-2023-341698.8Cross-Site Request Forgery (CSRF) vulnerability in SAKURA Internet Inc. TS Webfonts for さくらのレンタルサーバ plugin <= 3.1.2 versions.CVE-2023-34177.5Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment could be incorrectly shown as being a do CVE-2023-341704.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Overnight Quick/Bulk Order Form for WooCommerce plugin <= 3.5.7 version CVE-2023-341718.8Cross-Site Request Forgery (CSRF) vulnerability in Alex Raven WP Report Post plugin <= 2.1.2 versions.