Arm known exploited vulnerabilities
Every Arm CVE on CISA's Known Exploited Vulnerabilities catalog, newest addition first: 9 in all, 0 added in the last 12 months.
- CVE-2024-4610Mali GPU Kernel Driver allows improper GPU memory processing operationsArm Bifrost GPU Kernel Driver · Arm Valhall GPU Kernel Driv…
- CVE-2023-4211Mali GPU Kernel Driver Allows Improper GPU Memory Processing OperationsArm Midgard GPU Kernel Driver · Arm Bifrost GPU Kernel D… +2
- CVE-2021-29256.
- CVE-2023-26083Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver a
- CVE-2022-38181The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled.
- CVE-2022-22706Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages.
- CVE-2021-28664The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achie
- CVE-2021-28663The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading t
- CVE-2021-27562In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the printing out of secure da
Get alerts for new known exploited vulnerabilities
Only want the packages you use? Check a lockfile to get a feed for your stack.
https://cve.now/kev/feed
Paste into Feedly or any RSS reader, or run /feed subscribe https://cve.now/kev/feed in Slack. For email alerts, give it to an RSS-to-email service.
https://cve.now/kev/feed?format=atom
The same entries as Atom, for readers that prefer it.
https://cve.now/kev/feed?format=json
The same entries as JSON Feed 1.1, for scripts and readers that support it.
https://cve.now/api/v1/entries?filter=kev
Pages of 30 entries, newest first. Pass the response's next_cursor as cursor for the next page.
Frequently asked questions
How many Arm vulnerabilities are in CISA KEV?
9 Arm vulnerabilities are on CISA's Known Exploited Vulnerabilities catalog, 0 of them added in the last 12 months. The newest is CVE-2024-4610 (Arm Mali GPU Kernel Driver Use-After-Free Vulnerability), added 2024-06-12.
Which Arm products are in CISA KEV?
3 products, including Mali GPU Kernel Driver, Mali Graphics Processing Unit (GPU), Trusted Firmware. Attackers have exploited every one of these entries in the wild, and US federal agencies must patch each by its CISA due date.
Are Arm KEV vulnerabilities used by ransomware?
CISA has no known ransomware use on record for Arm's KEV entries.