Arm vendor intelligence

Arm Known Exploited Vulnerabilities

Track evidence-backed exploitation affecting Arm products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.

Browse Arm KEVs Full KEV feed

Total KEVs: 10; Known exploited vulnerabilities affecting Arm products
In CISA KEV: 9; Records also listed in the official catalog
Beyond CISA KEV: 1; Additional exploited CVEs absent from CISA KEV
Sensor Observed: 0; Arm KEVs with sensor-observed exploitation activity

The catalog gap matters for Arm exposure

One of the ten exploited Arm CVEs tracked here are not in CISA KEV. Teams relying on the official catalog alone would miss 10% of this vendor portfolio.

90%
Covered by CISA: 10%
Beyond CISA: 6
Product families

Attested Arm CVEs

Search the exploited-vulnerability portfolio, then narrow it to official CISA coverage or the additional records KEV Intelligence tracks beyond the catalog.

How exploitation is verified

CVE / description	Product	Confidence	CISA KEV	Added
CVE-2022-29007 Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Dairy Farm Shop Management System v1.0 allows...	Shop Management System	High	Beyond CISA	08 Nov 2025
CVE-2021-28663 The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a...	Mali GPU kernel driver	Confirmed	In CISA	03 Nov 2021
CVE-2021-28664 The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve...	Mali GPU kernel driver	Confirmed	In CISA	03 Nov 2021
CVE-2021-27562 In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the printing out of secure data when...	Trusted Firmware M	Confirmed	In CISA	03 Nov 2021
CVE-2022-22706 Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through...	Mali GPU Kernel Driver	Confirmed	In CISA	30 Mar 2023
CVE-2022-38181 The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost...	Mali GPU kernel driver	Confirmed	In CISA	30 Mar 2023
CVE-2023-26083 Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all...	Mali GPU Kernel Driver	Confirmed	In CISA	07 Apr 2023
CVE-2021-29256 . The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege...	Mali GPU kernel driver	Confirmed	In CISA	07 Jul 2023
CVE-2023-4211 Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations	Midgard GPU Kernel Driver, Bifrost GPU Kernel Driver, Valhall GPU Kernel Driver, Arm 5th Gen GPU Architecture Kernel Driver	Confirmed	In CISA	03 Oct 2023
CVE-2024-4610 Mali GPU Kernel Driver allows improper GPU memory processing operations	Bifrost GPU Kernel Driver, Valhall GPU Kernel Driver	Confirmed	In CISA	12 Jun 2024

Showing 10 of 10 Arm known exploited vulnerabilities.

Recurring weakness patterns

Use after free, out-of-bounds write, and restriction account for eight mapped occurrences across this Arm KEV portfolio.

Browse all KEVs →

CWE-416

Use After Free

CWE-787

Out-of-bounds Write

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-401

Missing Release of Memory after Effective Lifetime

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Early warning alerts

Get alerts on high-impact exploitation

Receive curator-selected alerts when exploitation activity warrants attention. Each alert includes the evidence and context needed to decide what requires attention now.