# CVE-2026-101178: CVE-2026-101178

Status: published. Published: 2026-11-02. Updated: 2026-11-02.

Permission control vulnerability in the autofill service module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.

## Remediation

No remediation reported in collected sources

## Affected products and versions

- Huawei / HarmonyOS: 4.3.3 (affected); 4.3.1 (affected); 4.3.0 (affected); 4.2.0 (affected); 4.0.0 (affected). Source: CNA: huawei
- Huawei / EMUI: 16.0.0 (affected); 15.0.0 (affected); 14.2.0 (affected); 14.0.0 (affected). Source: CNA: huawei

## Severity and prioritization

- CVSS 3.1: 6.6 (medium); CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L; source: CNA: huawei

- CISA KEV: No listing in collected sources

- EPSS: Not available

- SSVC: Not available

- Weaknesses: CWE-200

## Exploit evidence

No exploit evidence in collected sources. This is not proof of no exploitation.

## References

- https://consumer.huawei.com/en/support/bulletin/2026/10/ (CNA: huawei)

- https://consumer.huawei.com/en/support/bulletinvision/2026/10/ (CNA: huawei)

## Provenance

- CNA: huawei: https://www.cve.org/CVERecord?id=CVE-2026-101178; retrieved 2026-11-02; source updated 2026-11-02

Revision: 20d2fd4a242db2de476f3b2c2ad3731b77faec4d1c9e919d4edad9cce87f9bfb

Canonical: https://y2.dev/cve/CVE-2026-101178