Description
DoS vulnerability in the browser kernel. Impact: Successful exploitation of this vulnerability may affect availability.
Published: 2026-06-09
Score: 4.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is a denial‑of‑service flaw located in the browser kernel of HarmonyOS. Exploiting it can cause the browser component to become unavailable, compromising system availability without affecting confidentiality or integrity. The issue is classified as CWE‑399, indicating a resource exhaustion or kernel crash problem.

Affected Systems

Huawei HarmonyOS is the affected product. No specific OS or device model is mentioned, and no version range is provided. All HarmonyOS installations that include this browser kernel are potentially vulnerable until the vendor issues a fix.

Risk and Exploitability

The CVSS score of 4.3 places the vulnerability in the moderate range, and no EPSS score is currently available, suggesting limited known exploitation activity. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector involves sending malicious input to the browser kernel, which would be effective against local users or remote users who navigate to a malicious site. Because precise attack and privilege prerequisites are not detailed, the exact exploitation path is inferred rather than confirmed.

Generated by OpenCVE AI on June 9, 2026 at 08:23 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade HarmonyOS to the latest firmware that includes the DoS fix.
  • Limit or block external traffic destined for the browser by configuring firewall or network segmentation.
  • Monitor system logs for kernel crashes or repeated failures in the browser component and alert on anomalies.

Generated by OpenCVE AI on June 9, 2026 at 08:23 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 09 Jun 2026 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Tue, 09 Jun 2026 08:45:00 +0000

Type Values Removed Values Added
Title Browser Kernel Denial of Service Vulnerability in HarmonyOS
First Time appeared Huawei
Huawei harmonyos
Vendors & Products Huawei
Huawei harmonyos

Tue, 09 Jun 2026 07:45:00 +0000

Type Values Removed Values Added
Description DoS vulnerability in the browser kernel. Impact: Successful exploitation of this vulnerability may affect availability.
Weaknesses CWE-399
References
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L'}


Subscriptions

Huawei Harmonyos
cve-icon MITRE

Status: PUBLISHED

Assigner: huawei

Published:

Updated: 2026-06-09T13:07:08.186Z

Reserved: 2026-04-23T01:42:44.929Z

Link: CVE-2026-41983

cve-icon Vulnrichment

Updated: 2026-06-09T13:07:03.218Z

cve-icon NVD

Status : Deferred

Published: 2026-06-09T08:16:28.283

Modified: 2026-06-09T13:34:58.997

Link: CVE-2026-41983

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-09T08:30:35Z

Weaknesses