PULSEUnderground Intel

LIVE28signals / 24h

FEED

ransomdragonforce reclama a Zhito Technology · UA · Technologyransomsilentransomgroup reclama a Morrison Cohen · US · Professional Servicesransomemperador reclama a Afflelou · FR · Retail & E-Commerceransombyod reclama a University of New Mexico · US · Educationransomrhysida reclama a MISC Group · MY · Energy & Utilitiesransomn0n reclama a Ingelectus Innovative Electrical Solutions S.L. · ES · Energy & Utilitiesransomwhitearmor reclama a Gamdom · Otherransomfalcon reclama a Beasley Allen Law Firm · US · Professional Servicesransomqilin reclama a RaceTrakka · AU · Retail & E-Commerceransomqilin reclama a Smith Feddeler & Smith · US · Professional Servicesransomqilin reclama a Delta Electric Power Association · US · Energy & Utilitiesransomqilin reclama a Bangor Wholesale Laminates · GB · Manufacturingransomqilin reclama a TeleTronic · ES · Technologyransomqilin reclama a FIRMENGRUPPE APPL Holding GmbH · DE · Otherransomdragonforce reclama a Zhito Technology · UA · Technologyransomsilentransomgroup reclama a Morrison Cohen · US · Professional Servicesransomemperador reclama a Afflelou · FR · Retail & E-Commerceransombyod reclama a University of New Mexico · US · Educationransomrhysida reclama a MISC Group · MY · Energy & Utilitiesransomn0n reclama a Ingelectus Innovative Electrical Solutions S.L. · ES · Energy & Utilitiesransomwhitearmor reclama a Gamdom · Otherransomfalcon reclama a Beasley Allen Law Firm · US · Professional Servicesransomqilin reclama a RaceTrakka · AU · Retail & E-Commerceransomqilin reclama a Smith Feddeler & Smith · US · Professional Servicesransomqilin reclama a Delta Electric Power Association · US · Energy & Utilitiesransomqilin reclama a Bangor Wholesale Laminates · GB · Manufacturingransomqilin reclama a TeleTronic · ES · Technologyransomqilin reclama a FIRMENGRUPPE APPL Holding GmbH · DE · Other

CVE WatchJul 24, 2026

CVE-2026-28733

in OpenHarmony v6.0 and prior versions allow a local attacker arbitrary code execution.

CVSS

6.5

Medium

EPSS

0.1%

p3

KEV

—

Exploit Today

1

0-100

Published: May 19, 2026 · Last modified: Jul 24, 2026 · CWE-416

EPSS · 30d

0.1%EPSS · 30 days0.1%

2026-09-282026-10-25

Technical description

in OpenHarmony v6.0 and prior versions allow a local attacker arbitrary code execution.

Official references

gitcode.comhttps://gitcode.com/openharmony/security/tree/master/zh/security-disclosure/2026/2026-05.md

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-869167.8 HIG

———A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7.2. An app may be able to execute arbitrary code with kernel privileges.8h CVE-2026-1126558.8 HIG

———A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.7h CVE-2026-1126518.8 HIG

———A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.7h CVE-2026-1126378.8 HIG

———A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.7h CVE-2026-1126268.8 HIG

———A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.7h CVE-2026-1126238.8 HIG

———A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, visionOS 27.2. Processing maliciously crafted web content may lead to arbitrary code execution.7h