Arm Known Exploited Vulnerabilities
Evidence-backed KEV intelligence for Arm products — CISA KEV status, confidence, sensor telemetry, and virtual-patch availability.
Total KEVs
10
In CISA KEV
9
Beyond CISA KEV
1
Sensor Observed
0
Virtual Patch Available
0
Arm KEVs Added by Year
10 Arm KEVs added all time (primary attestation date).
Attested CVEs
| CVE | Product | Confidence | CISA KEV | Added |
|---|---|---|---|---|
|
CVE-2022-29007
Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Dairy Farm Shop Management System v1.0 allows... |
Shop Management System | High | Not in CISA | 08 Nov 2025 |
|
CVE-2021-28663
The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a... |
Mali GPU kernel driver | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-28664
The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve... |
Mali GPU kernel driver | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2021-27562
In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the printing out of secure data when... |
Trusted Firmware M | Confirmed | In CISA | 03 Nov 2021 |
|
CVE-2022-22706
Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through... |
Mali GPU Kernel Driver | Confirmed | In CISA | 30 Mar 2023 |
|
CVE-2022-38181
The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost... |
Mali GPU kernel driver | Confirmed | In CISA | 30 Mar 2023 |
|
CVE-2023-26083
Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all... |
Mali GPU Kernel Driver | Confirmed | In CISA | 07 Apr 2023 |
|
CVE-2021-29256
. The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege... |
Mali GPU kernel driver | Confirmed | In CISA | 07 Jul 2023 |
|
CVE-2023-4211
Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations |
Midgard GPU Kernel Driver, Bifrost GPU Kernel Driver, Valhall GPU Kernel Driver, Arm 5th Gen GPU Architecture Kernel Driver | Confirmed | In CISA | 03 Oct 2023 |
|
CVE-2024-4610
Mali GPU Kernel Driver allows improper GPU memory processing operations |
Bifrost GPU Kernel Driver, Valhall GPU Kernel Driver | Confirmed | In CISA | 12 Jun 2024 |
Common Vulnerability Classes (CWE)
- CWE-416 — Use After Free 5
- CWE-787 — Out-of-bounds Write 2
- CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer 1
- CWE-401 — Missing Release of Memory after Effective Lifetime 1
- CWE-89 — Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 1
Browse all known exploited vulnerabilities · What is a known exploited vulnerability? · Methodology