Arm Limited
First CVE: Jul 27, 2023Active for: 3 years
52
CVEs Published
More CVEs Published than 59% of tracked CNAs
13.0
Avg CVEs / Year
More Avg CVEs / Year than 60% of tracked CNAs
6.7
Avg CVSS Score
Higher Avg CVSS Score than 30% of tracked CNAs
3.8%
In CISA KEV
Higher KEV Rate than 95% of tracked CNAs
Self-Reporting Analysis
Of all the CVEs published by Arm Limited as a CNA, 94.2% affect products that Arm Limited develops as a vendor.
94.2%
Self-reported: 49Third-party: 3
Of all the CVEs published that affect products developed by Arm Limited, 29.9% are self-published by Arm Limited as a CNA.
29.9%
70.1%
Self-published: 49Published by other CNAs: 115
Trends Over Time
The number and severity of CVEs published by Arm Limited over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 27, 2023
2 years ago
Most Recent CVE
Jun 9, 2026
45 days ago
Top CVEs
All CVEs published by Arm Limited as a CNA, regardless of affected vendor or product.
52 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-4610HIGH Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GPU memory processing opera | Jun 7, 2024 | 7.8 | 63 | YES | NO |
CVE-2023-4211MEDIUM A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. | Oct 1, 2023 | 5.5 | 59 | YES | NO |
CVE-2025-10263CRITICAL Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex | Jun 9, 2026 | 9.1 | 42 | NO | NO |
CVE-2025-0647HIGH In certain Arm CPUs, a CPP RCTX instruction executed on one Processing Element (PE) may inhibit TLB invalidation when a TLBI is issued to the PE, either by the same PE or another P | Jan 14, 2026 | 7.9 | 28 | NO | NO |
CVE-2025-0072HIGH Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper | May 2, 2025 | 7.8 | 26 | NO | NO |
CVE-2025-0015HIGH Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to make improper GP | Feb 3, 2025 | 7.8 | 24 | NO | NO |
CVE-2024-5660CRITICAL Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, C | Dec 10, 2024 | 9.8 | 24 | NO | NO |
CVE-2024-2937HIGH Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileg | Aug 5, 2024 | 7.8 | 24 | NO | NO |
CVE-2024-0153HIGH Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Valhall GPU Firmware, Arm Ltd Arm 5th Gen GPU Architecture Firmware allows a local | Jul 1, 2024 | 7.8 | 24 | NO | NO |
CVE-2023-6241HIGH Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel | Mar 4, 2024 | 7.0 | 24 | NO | NO |
CVE Severity & Scoring
Severity distribution of CVEs published by this CNA52 CVEs
42%
50%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local42 (80.8%)
Network10 (19.2%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low42 (80.8%)
High10 (19.2%)
Unknown0 (0.0%)
User Interaction
None51 (98.1%)
Unknown0 (0.0%)
Required1 (1.9%)
Privileges Required
Low30 (57.7%)
High1 (1.9%)
None21 (40.4%)
Unknown0 (0.0%)
Exploit Exposure
Signals from CVEs in this cna scope (52 CVEs).
CISA KEV
2 CVEs
3.8% of CVEs· 95th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
An overview of all social media posts that mention a CVE ID published by Arm Limited as a CNA.
Media Mentions
Media articles that mention a CVE ID published by Arm Limited as a CNA — matched by CVE ID, not by organization name.