CVE-2025-66327CWE-362

CVE-2025-66327

High · published December 8, 2025

CVSS v3.1
7.1
EPSS
0%
Percentile
0.0
In the wild
Unconfirmed
What it is

⚡ A race condition in the network module could be the key to unlocking sensitive data! Just when you thought your defenses were strong, this vulnerability could expose your service confidentiality. 🔥 Think of it like two chefs in a kitchen trying to grab the last ingredient at the same time. If they're not coordinated, one could end up using something they shouldn't, which leads to a dish that could ruin the entire meal. This race condition allows attackers to seize control under the right circumstances, compromising what you hold dear. If exploited, this race condition could allow a savvy attacker to manipulate network traffic, potentially exposing confidential information. Imagine someone slipping through your security and snatching away your most prized recipes—devastating! The consequences could lead to unauthorized access and significant data leaks.

Put simply

Think of it like two chefs in a kitchen trying to grab the last ingredient at the same time. If they're not coordinated, one could end up using something they shouldn't, which leads to a dish that could ruin the entire meal. This race condition allows attackers to seize control under the right circumstances, compromising what you hold dear. This vulnerability arises from a race condition in the network module, where timing issues allow unauthorized interference with ongoing processes, ultimately compromising service confidentiality.

What to do

If exploited, this race condition could allow a savvy attacker to manipulate network traffic, potentially exposing confidential information. Imagine someone slipping through your security and snatching away your most prized recipes—devastating! The consequences could lead to unauthorized access and significant data leaks. To mitigate this risk, ensure that you apply any patches provided by your vendor immediately. Additionally, review your network configurations and implement stricter access controls to help prevent any unauthorized access related to this vulnerability. You've got this! With the right steps, you can safeguard your services against this threat and secure your environment. 🛡️

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00067 · 0.0th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2025-12-08T14:15Z
Affected products (2)
ProductVersionsFixed in
huawei/harmonyosall versions—
huawei/harmonyosall versions—
References (1)
EPSS history
Timeline
  • 08 DEC 08:09Z
    Race condition vulnerability in the network module
    cvelistv5