CVE-2026-49306

LowCVSS 3.3/10Last modified Aug 26, 2026

Description

UAF vulnerability in the time and time zone module. Impact: Successful exploitation of this vulnerability may affect availability.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-416

Affected software

VendorProductVersions
HuaweiHarmonyOS6.1.0

References

Timeline

Published
Aug 17, 2026
Last modified
Aug 26, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-493076.2Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect service coCVE-2026-493085.5Permission control vulnerability in the clipboard module. Impact: Successful exploitation of this vulnerability may affect service confidentCVE-2026-493094.8Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiCVE-2026-49318.6Smart contract Marginal v1 performs unsafe downcast, allowing attackers to settle a large debt position for a negligible asset cost.CVE-2026-493108.6Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service CVE-2026-493116.2Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availabilCVE-2026-493124.0Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentialCVE-2026-493135.5Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vulnerability may affect service confidentiCVE-2026-493147.3OOB write vulnerability in the rendering and composition module. Impact: Successful exploitation of this vulnerability may affect availabiliCVE-2026-493157.1DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-493164.6Expected behavior violation in the in-vehicle network of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-networCVE-2026-493172.4Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an
CVE-2026-49306: Low severity, CVSS 3.3 | Vulnix