Permission Control Issue in Autofill Service Module by Huawei
CVE-2026-101178

6.6MEDIUM

Key Information:

Vendor

Huawei
Status
Harmonyos
Emui
Vendor
CVE Published:
2 November 2026

What is CVE-2026-101178?

A permission control vulnerability exists within the autofill service module of Huawei products. If exploited, this vulnerability could potentially compromise the confidentiality of sensitive user data, raising significant security concerns for users.

Affected Version(s)

EMUI 16.0.0

EMUI 15.0.0

EMUI 14.2.0

References

https://consumer.huawei.com/en/support/bulletin/2026/10/
https://consumer.huawei.com/en/support/bulletinvision/202...

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.