CVE-2021-22295

EPSS 0.1%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

06 Aug 2021Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A component of the HarmonyOS has a permission bypass vulnerability. Local attackers may exploit this vulnerability to cause the device to hang due to the page error OsVmPageFaultHandler.

Affected products

Huawei · HarmonyOS

References

https://device.harmonyos.com/cn/console/safetyDetail?id=9145efa5d9064d94a7fc3968b6054d83&pageSize=10&pageIndex=1