CVE-2025-58302
High
Published: 28 November 2025
Published
28 November 2025
Modified
02 December 2025
KEV Added
—
Patch
—
CVSS Score v3.1
8.4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.0001
1.0th percentile
Risk Priority
17
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2025-58302 is a high-severity an unspecified weakness vulnerability in Huawei Harmonyos. Its CVSS base score is 8.4 (High).
Operationally, ranked at the 1.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-199860
Vulnerability details
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
huawei
emui
12.0.0, 13.0.0, 14.0.0, 14.2.0, 15.0.0
huawei
harmonyos
2.0.0, 3.0.0, 3.1.0, 4.0.0, 4.2.0
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.