Vulnerabilidades en Honor

52 resultados
Análisis Vexday

Com 52 CVEs catalogadas e nenhuma confirmada em exploração ativa no catálogo KEV da CISA, o histórico de vulnerabilidades da Honor apresenta uma taxa de exploração abaixo da média geral do catálogo. O único CVE de severidade crítica registrado é o CVE-2023-23424, que também detém o maior escore EPSS observado no portfólio (0,0056), ainda assim um valor baixo em termos absolutos, sugerindo probabilidade reduzida de exploração em larga escala no curto prazo. A falha mais recorrente por tipo é CWE-203, relacionada a vazamento de informações por diferenças de comportamento observável, o que indica atenção necessária a controles de canal lateral e exposição indireta de dados. O surgimento de 3 novas CVEs nos últimos 90 dias e a ausência de PoCs públicas reforçam um perfil de risco moderado, mas que deve ser monitorado continuamente.

CVE-2026-31368HIGHPrivilege Bypass in AiAssistantEPSS 0.1%CVE-2023-23438MEDIUM Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptEPSS 0.1%CVE-2024-47148MEDIUMSome Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptiEPSS 0.1%CVE-2023-51433LOW Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak. EPSS 0.1%CVE-2023-23431HIGH Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwritEPSS 0.1%CVE-2024-47157LOWSome Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptiEPSS 0.1%CVE-2023-23433MEDIUM Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwritEPSS 0.1%CVE-2023-23432HIGH Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwritEPSS 0.1%CVE-2023-23436HIGH Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwritEPSS 0.1%CVE-2023-23435MEDIUM Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwritEPSS 0.1%CVE-2025-57840LOWPrivilege Bypass in ADBEPSS 0.1%CVE-2026-31369LOWPrivilege Bypass in PcManagerEPSS 0.1%