What is the CVSS score of CVE-2026-34853?

CVE-2026-34853 has a CVSS 3.1 base score of 7.7 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Emui are affected by CVE-2026-34853?

CVE-2026-34853 is a privilege escalation vulnerability in Huawei HarmonyOS and EMUI location services that allows local administrators to bypass security controls and compromise system integrity,…

How to fix or mitigate CVE-2026-34853?

Within 24 hours: Inventory all Huawei devices running HarmonyOS and EMUI in your environment and document current firmware versions. Within 7 days: Contact Huawei support to confirm availability of patched firmware versions and establish a patch timeline; restrict local administrator account access to essential personnel only and enforce multi-factor authentication where supported. Within 30 days: Apply vendor-released patch to all affected HarmonyOS and EMUI devices as versions become available; validate remediation through device compliance scanning.

Emui CVE-2026-34853

EUVD-2026-21798 HIGH

Privilege Context Switching Error (CWE-270)

2026-04-13 huawei

GHSA-gmm9-3v86-m9wj

Authentication Bypass Emui

7.7

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.7 HIGH

AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Re-analysis Queued

Apr 16, 2026 - 05:19 vuln.today

cvss_changed

Analysis Generated

Apr 13, 2026 - 04:24 vuln.today

EUVD ID Assigned

Apr 13, 2026 - 04:15 euvd

EUVD-2026-21798

Analysis Generated

Apr 13, 2026 - 04:15 vuln.today

CVE Published

Apr 13, 2026 - 03:54 nvd

HIGH 7.7

DescriptionCVE.org

Permission bypass vulnerability in the LBS module. Impact: Successful exploitation of this vulnerability may affect availability.

AnalysisAI

Permission bypass in Huawei HarmonyOS and EMUI LBS (Location-Based Services) module enables highly-privileged local attackers with user interaction to achieve full compromise across security contexts (confidentiality, integrity, availability impact). CVSS 7.7 HIGH severity. No public exploit identified at time of analysis. Attack requires local access, high privileges (administrator/root), user interaction, but succeeds with low complexity once prerequisites met. Scope change (S:C) indicates container escape or privilege boundary violation beyond the vulnerable component.

Technical ContextAI

This vulnerability affects the Location-Based Services (LBS) module in Huawei's mobile operating systems (HarmonyOS and EMUI). The root cause is CWE-270 (Privilege Context Switching Error), indicating improper handling of privilege boundaries when transitioning between security contexts. LBS modules typically manage GPS/location data and related permissions-a permission bypass here could allow malicious apps or processes to circumvent Android/HarmonyOS permission models. The Changed scope (S:C) in the CVSS vector indicates the vulnerability allows impact beyond the vulnerable component's security authority, suggesting privilege escalation or sandbox escape. The requirement for high privileges (PR:H) and user interaction (UI:R) suggests this may involve tricking an administrator into installing a malicious configuration profile, MDM payload, or system-level application that then exploits the LBS permission flaw.

RemediationAI

Apply vendor-released security updates per Huawei's April 2026 security bulletin available at https://consumer.huawei.com/en/support/bulletin/2026/4/ and https://consumer.huawei.com/en/support/bulletinvision/2026/4/. Exact patched versions not independently confirmed from available data; users must check Huawei's official advisory for model-specific update packages. Until patching, mitigations include restricting installation of system-level applications to trusted sources only, disabling unknown sources in device settings, auditing MDM profiles and device administrator permissions, and limiting physical device access. Enterprise deployments should review MDM administrator privilege assignments and enable endpoint detection monitoring for abnormal LBS permission requests.