What the vulnerability does
01Description
in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps.
CVE-2026-24792
HIGH
CVE-2026-24792: web_webview has a Race Condition vulnerability
CVSS base score
8.1/10
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Key dates
02Disclosure timeline
May 19, 2026
CVE published
May 19, 2026
Record updated
External resources
03References
Related vulnerabilities
04Related CVE
CVE-2023-1285
CVE-2026-33565 kernel_linux_common_modules has a Race Condition vulnerability
CVE-2024-6409 Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9
CVE-2026-27766 multimedia_audio_framework has a Race Condition vulnerability
CVE-2025-4598 Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump
