By year
17
18
19
20
21
22
23
24
25
26
Bars are flaws published each year; the red part is the share attackers have used.
Exploited ARM flaws
These are on CISA’s Known Exploited Vulnerabilities list, newest first. If you run any of these products, these come before everything else.
- CVE-2024-4610 Arm Mali GPU Kernel Driver Use-After-FreeExploited since Jun 12, 2024 · CVSS 7.8
- CVE-2023-4211 Arm Mali GPU Kernel Driver Use-After-FreeExploited since Oct 3, 2023 · CVSS 5.5
- CVE-2021-29256 Arm Mali GPU Kernel Driver Use-After-FreeExploited since Jul 7, 2023 · CVSS 8.8
- CVE-2023-26083 Arm Mali GPU Kernel Driver Information DisclosureExploited since Apr 7, 2023 · CVSS 3.3
- CVE-2022-22706 Arm Mali GPU Kernel Driver UnspecifiedExploited since Mar 30, 2023 · CVSS 7.8
- CVE-2022-38181 Arm Mali GPU Kernel Driver Use-After-FreeExploited since Mar 30, 2023 · CVSS 8.8
- CVE-2021-27562 Arm Trusted Firmware Out-of-Bounds WriteExploited since Nov 3, 2021 · CVSS 5.5
- CVE-2021-28664 Arm Mali Graphics Processing Unit (GPU) UnspecifiedExploited since Nov 3, 2021 · CVSS 8.8
- CVE-2021-28663 Arm Mali Graphics Processing Unit (GPU) Use-After-FreeExploited since Nov 3, 2021 · CVSS 8.8
Latest high and critical flaws
- CVE-2026-9040 A race condition vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allowHigh 7.7 · Sep 8, 2026
- CVE-2026-9034 Use After Free vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace DriveHigh 7.8 · Sep 8, 2026
- CVE-2026-7477 Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows High 7.8 · Sep 8, 2026
- CVE-2026-7476 Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows High 7.8 · Sep 8, 2026
- CVE-2026-5729 Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user processHigh 7.8 · Sep 8, 2026
- CVE-2026-0860 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel DriveHigh 7.5 · Sep 8, 2026
- CVE-2025-10263 Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C,Critical 9.1 · Jun 9, 2026
- CVE-2026-34877 An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0.Critical 9.8 · Apr 2, 2026
- CVE-2026-34872 An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0.Critical 9.1 · Apr 1, 2026
- CVE-2026-25835 Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).High 7.7 · Apr 1, 2026
- CVE-2025-0647 In certain Arm CPUs, a CPP RCTX instruction executed on one Processing Element (PE) may inhibit TLB invalidation when a TLBI is issued to the PE, either by the High 7.9 · Jan 14, 2026
- CVE-2025-1246 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace DriHigh 7.8 · Jun 2, 2025
- CVE-2025-0819 Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows High 7.8 · Jun 2, 2025
- CVE-2025-0073 Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user processHigh 7.8 · Jun 2, 2025
- CVE-2025-0427 Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows High 7.8 · May 2, 2025
- CVE-2025-0072 Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user processHigh 7.8 · May 2, 2025
- CVE-2025-0015 Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user processHigh 7.8 · Feb 3, 2025
- CVE-2024-11864 Specifically crafted SCMI messages sent to an SCP running SCP-Firmware release versions up to and including 2.15.0 may lead to a Usage Fault and crash the SCPHigh 7.5 · Jan 14, 2025
- CVE-2024-5660 Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, CortCritical 9.8 · Dec 10, 2024
- CVE-2024-9413 The transport_message_handler function in SCP-Firmware release versions 2.11.0-2.15.0 does not properly handle errors, potentially allowing an Application ProceHigh 8 · Nov 13, 2024
- CVE-2024-3655 Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows High 7.8 · Sep 3, 2024
- CVE-2024-4607 Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows High 7.8 · Aug 5, 2024
- CVE-2024-2937 Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows High 7.8 · Aug 5, 2024
- CVE-2024-0153 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Valhall GPU Firmware, Arm Ltd Arm 5th Gen GPU Architecture FirmHigh 7.8 · Jul 1, 2024
- CVE-2024-4610 Arm Mali GPU Kernel Driver Use-After-FreeExploited · High 7.8 · Jun 7, 2024
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.