{"schema_version":1,"title":"Arm vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 25 vulnerabilities in Arm: 0 in the last 7 days and 9 in the last 90 days, 11 of them critical and 9 exploited in the wild. The most recent, CVE-2026-58766, was published on 15 September 2026. 5 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/arm","json_url":"https://junglewise.ai/threats/vendors/arm.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/arm","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":8,"all_time":25,"critical":11,"exploited":9,"last_7_days":0,"last_30_days":9,"last_90_days":9,"last_365_days":15},"latest":[{"cve":"CVE-2026-58766","cvss":7.8,"epss":0.001,"slug":"cve-2026-58766-arm-smmu-v3-privilege-escalation-due-to-logic-error","title":"ARM SMMU-v3 privilege escalation due to logic error","severity":"high","exploited":false,"published_at":"2026-09-15T19:17:33.927+00:00","url":"https://junglewise.ai/threats/cve-2026-58766-arm-smmu-v3-privilege-escalation-due-to-logic-error"},{"cve":"CVE-2026-9040","cvss":7.7,"epss":0.0013,"slug":"cve-2026-9040-arm-bifrost-valhall-and-5th-gen-gpu-kernel-driver-race-condition","title":"Arm Bifrost, Valhall, and 5th Gen GPU Kernel Driver race condition","severity":"high","exploited":false,"published_at":"2026-09-08T15:18:56.467+00:00","url":"https://junglewise.ai/threats/cve-2026-9040-arm-bifrost-valhall-and-5th-gen-gpu-kernel-driver-race-condition"},{"cve":"CVE-2026-9034","cvss":7.8,"epss":0.0016,"slug":"cve-2026-9034-arm-bifrost-gpu-userspace-driver-use-after-free-vulnerability","title":"Arm Bifrost GPU Userspace Driver use-after-free vulnerability","severity":"high","exploited":false,"published_at":"2026-09-08T15:18:56.353+00:00","url":"https://junglewise.ai/threats/cve-2026-9034-arm-bifrost-gpu-userspace-driver-use-after-free-vulnerability"},{"cve":"CVE-2026-7476","cvss":7.8,"epss":0.0016,"slug":"cve-2026-7476-arm-bifrost-gpu-kernel-driver-use-after-free-vulnerability","title":"Arm Bifrost GPU Kernel Driver use-after-free vulnerability","severity":"high","exploited":false,"published_at":"2026-09-08T15:18:48.773+00:00","url":"https://junglewise.ai/threats/cve-2026-7476-arm-bifrost-gpu-kernel-driver-use-after-free-vulnerability"},{"cve":"CVE-2026-5729","cvss":7.8,"epss":0.0016,"slug":"cve-2026-5729-arm-valhall-gpu-kernel-driver-use-after-free-vulnerability","title":"Arm Valhall GPU Kernel Driver use-after-free vulnerability","severity":"high","exploited":false,"published_at":"2026-09-08T15:18:44.06+00:00","url":"https://junglewise.ai/threats/cve-2026-5729-arm-valhall-gpu-kernel-driver-use-after-free-vulnerability"},{"cve":"CVE-2026-12285","cvss":4,"epss":0.0011,"slug":"cve-2026-12285-arm-bifrost-valhall-gpu-kernel-driver-use-after-free","title":"Arm Bifrost/Valhall GPU Kernel Driver use-after-free","severity":"medium","exploited":false,"published_at":"2026-09-08T15:18:40.17+00:00","url":"https://junglewise.ai/threats/cve-2026-12285-arm-bifrost-valhall-gpu-kernel-driver-use-after-free"},{"cve":"CVE-2026-11891","cvss":5.1,"epss":0.0011,"slug":"cve-2026-11891-arm-valhall-gpu-userspace-driver-use-after-free-vulnerability","title":"Arm Valhall GPU Userspace Driver use-after-free vulnerability","severity":"medium","exploited":false,"published_at":"2026-09-08T15:18:40.067+00:00","url":"https://junglewise.ai/threats/cve-2026-11891-arm-valhall-gpu-userspace-driver-use-after-free-vulnerability"},{"cve":"CVE-2026-0860","cvss":7.5,"epss":0.0025,"slug":"cve-2026-0860-arm-valhall-gpu-kernel-driver-information-disclosure","title":"Arm Valhall GPU Kernel Driver information disclosure","severity":"high","exploited":false,"published_at":"2026-09-08T15:18:39.953+00:00","url":"https://junglewise.ai/threats/cve-2026-0860-arm-valhall-gpu-kernel-driver-information-disclosure"},{"cve":"CVE-2026-0001","cvss":4.4,"epss":0.0017,"slug":"cve-2026-0001-arm-gpu-kernel-driver-use-after-free-in-memory-processing","title":"Arm GPU Kernel Driver use-after-free in memory processing","severity":"medium","exploited":false,"published_at":"2026-09-08T15:18:39.773+00:00","url":"https://junglewise.ai/threats/cve-2026-0001-arm-gpu-kernel-driver-use-after-free-in-memory-processing"},{"cve":"CVE-2025-10263","slug":"cve-2025-10263-arm-multiple-cpu-cores-privilege-escalation-via-unauthorized","title":"Arm Multiple CPU Cores privilege escalation via unauthorized writes","severity":"high","exploited":false,"published_at":"2026-06-09T10:16:33.003+00:00","url":"https://junglewise.ai/threats/cve-2025-10263-arm-multiple-cpu-cores-privilege-escalation-via-unauthorized"},{"cve":"CVE-2026-42627","cvss":6.2,"epss":0.0002,"slug":"cve-2026-42627-arm-armnn-integer-overflow-in-tensorshape-getnumelements","title":"Arm ArmNN integer overflow in TensorShape::GetNumElements","severity":"medium","exploited":false,"published_at":"2026-05-22T18:16:22.593+00:00","url":"https://junglewise.ai/threats/cve-2026-42627-arm-armnn-integer-overflow-in-tensorshape-getnumelements"},{"cve":"CVE-2026-34877","cvss":9.8,"epss":0.0022,"slug":"cve-2026-34877-mbed-tls-memory-corruption-via-insecure-deserialization-of-ssl","title":"Mbed TLS memory corruption via insecure deserialization of SSL context","severity":"critical","exploited":false,"published_at":"2026-04-02T17:16:26.927+00:00","url":"https://junglewise.ai/threats/cve-2026-34877-mbed-tls-memory-corruption-via-insecure-deserialization-of-ssl"},{"cve":"CVE-2026-34873","cvss":9.1,"epss":0.0004,"slug":"cve-2026-34873-mbed-tls-client-impersonation-in-tls-1-3-session-resumption","title":"Mbed TLS client impersonation in TLS 1.3 session resumption","severity":"critical","exploited":false,"published_at":"2026-04-01T21:17:01.99+00:00","url":"https://junglewise.ai/threats/cve-2026-34873-mbed-tls-client-impersonation-in-tls-1-3-session-resumption"},{"cve":"CVE-2026-34871","cvss":6.7,"epss":0.0002,"slug":"cve-2026-34871-arm-mbed-tls-predictable-seed-in-prng-on-linux","title":"Arm Mbed TLS Predictable Seed in PRNG on Linux","severity":"medium","exploited":false,"published_at":"2026-04-01T19:16:33.267+00:00","url":"https://junglewise.ai/threats/cve-2026-34871-arm-mbed-tls-predictable-seed-in-prng-on-linux"},{"cve":"CVE-2026-25835","cvss":7.7,"epss":0.0002,"slug":"cve-2026-25835-arm-mbed-tls-and-tf-psa-crypto-prng-state-cloning-vulnerability","title":"Arm Mbed TLS and TF-PSA-Crypto PRNG state cloning vulnerability","severity":"high","exploited":false,"published_at":"2026-04-01T19:16:28.663+00:00","url":"https://junglewise.ai/threats/cve-2026-25835-arm-mbed-tls-and-tf-psa-crypto-prng-state-cloning-vulnerability"},{"cve":"CVE-2025-49601","cvss":4.8,"epss":0.0026,"slug":"cve-2025-49601-mbed-tls-out-of-bounds-read-in-mbedtls-lms-import-public-key","title":"Mbed TLS out-of-bounds read in mbedtls_lms_import_public_key","severity":"medium","exploited":false,"published_at":"2025-07-04T15:15:22.467+00:00","url":"https://junglewise.ai/threats/cve-2025-49601-mbed-tls-out-of-bounds-read-in-mbedtls-lms-import-public-key"},{"cve":"CVE-2024-4610","cvss":7.8,"slug":"cve-2024-4610-arm-mali-gpu-kernel-driver-use-after-free-vulnerability","title":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2024-06-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-4610-arm-mali-gpu-kernel-driver-use-after-free-vulnerability"},{"cve":"CVE-2023-4211","cvss":5.5,"slug":"cve-2023-4211-arm-mali-gpu-kernel-driver-use-after-free-vulnerability","title":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2023-10-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-4211-arm-mali-gpu-kernel-driver-use-after-free-vulnerability"},{"cve":"CVE-2021-29256","cvss":8.8,"slug":"cve-2021-29256-arm-mali-gpu-kernel-driver-use-after-free-vulnerability","title":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2023-07-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-29256-arm-mali-gpu-kernel-driver-use-after-free-vulnerability"},{"cve":"CVE-2023-26083","cvss":3.3,"slug":"cve-2023-26083-arm-mali-gpu-kernel-driver-information-disclosure-vulnerability","title":"Arm Mali GPU Kernel Driver Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2023-04-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-26083-arm-mali-gpu-kernel-driver-information-disclosure-vulnerability"},{"cve":"CVE-2022-38181","cvss":8.8,"slug":"cve-2022-38181-arm-mali-gpu-kernel-driver-use-after-free-vulnerability","title":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2023-03-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-38181-arm-mali-gpu-kernel-driver-use-after-free-vulnerability"},{"cve":"CVE-2022-22706","cvss":7.8,"slug":"cve-2022-22706-arm-mali-gpu-kernel-driver-unspecified-vulnerability","title":"Arm Mali GPU Kernel Driver Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2023-03-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-22706-arm-mali-gpu-kernel-driver-unspecified-vulnerability"},{"cve":"CVE-2021-27562","cvss":5.5,"slug":"cve-2021-27562-arm-trusted-firmware-out-of-bounds-write-vulnerability","title":"Arm Trusted Firmware Out-of-Bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-27562-arm-trusted-firmware-out-of-bounds-write-vulnerability"},{"cve":"CVE-2021-28664","cvss":8.8,"slug":"cve-2021-28664-arm-mali-graphics-processing-unit-gpu-unspecified-vulnerability","title":"Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-28664-arm-mali-graphics-processing-unit-gpu-unspecified-vulnerability"},{"cve":"CVE-2021-28663","cvss":8.8,"slug":"cve-2021-28663-arm-mali-graphics-processing-unit-gpu-use-after-free","title":"Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-28663-arm-mali-graphics-processing-unit-gpu-use-after-free"}],"vendor":{"hub":true,"name":"Arm","slug":"arm","homepage":"https://www.arm.com/","description":"A semiconductor and software design company that develops processor architectures and intellectual property.","url":"https://junglewise.ai/threats/vendors/arm"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":8},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2021-29256","cvss":8.8,"slug":"cve-2021-29256-arm-mali-gpu-kernel-driver-use-after-free-vulnerability","title":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2023-07-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-29256-arm-mali-gpu-kernel-driver-use-after-free-vulnerability"},{"cve":"CVE-2022-38181","cvss":8.8,"slug":"cve-2022-38181-arm-mali-gpu-kernel-driver-use-after-free-vulnerability","title":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2023-03-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-38181-arm-mali-gpu-kernel-driver-use-after-free-vulnerability"},{"cve":"CVE-2021-28664","cvss":8.8,"slug":"cve-2021-28664-arm-mali-graphics-processing-unit-gpu-unspecified-vulnerability","title":"Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-28664-arm-mali-graphics-processing-unit-gpu-unspecified-vulnerability"},{"cve":"CVE-2021-28663","cvss":8.8,"slug":"cve-2021-28663-arm-mali-graphics-processing-unit-gpu-use-after-free","title":"Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-28663-arm-mali-graphics-processing-unit-gpu-use-after-free"},{"cve":"CVE-2024-4610","cvss":7.8,"slug":"cve-2024-4610-arm-mali-gpu-kernel-driver-use-after-free-vulnerability","title":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2024-06-12T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-4610-arm-mali-gpu-kernel-driver-use-after-free-vulnerability"},{"cve":"CVE-2022-22706","cvss":7.8,"slug":"cve-2022-22706-arm-mali-gpu-kernel-driver-unspecified-vulnerability","title":"Arm Mali GPU Kernel Driver Unspecified Vulnerability","severity":"critical","exploited":true,"published_at":"2023-03-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-22706-arm-mali-gpu-kernel-driver-unspecified-vulnerability"},{"cve":"CVE-2023-4211","cvss":5.5,"slug":"cve-2023-4211-arm-mali-gpu-kernel-driver-use-after-free-vulnerability","title":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","severity":"critical","exploited":true,"published_at":"2023-10-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-4211-arm-mali-gpu-kernel-driver-use-after-free-vulnerability"},{"cve":"CVE-2021-27562","cvss":5.5,"slug":"cve-2021-27562-arm-trusted-firmware-out-of-bounds-write-vulnerability","title":"Arm Trusted Firmware Out-of-Bounds Write Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-27562-arm-trusted-firmware-out-of-bounds-write-vulnerability"},{"cve":"CVE-2023-26083","cvss":3.3,"slug":"cve-2023-26083-arm-mali-gpu-kernel-driver-information-disclosure-vulnerability","title":"Arm Mali GPU Kernel Driver Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2023-04-07T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-26083-arm-mali-gpu-kernel-driver-information-disclosure-vulnerability"},{"cve":"CVE-2026-34877","cvss":9.8,"epss":0.0022,"slug":"cve-2026-34877-mbed-tls-memory-corruption-via-insecure-deserialization-of-ssl","title":"Mbed TLS memory corruption via insecure deserialization of SSL context","severity":"critical","exploited":false,"published_at":"2026-04-02T17:16:26.927+00:00","url":"https://junglewise.ai/threats/cve-2026-34877-mbed-tls-memory-corruption-via-insecure-deserialization-of-ssl"}],"generated_at":"2026-09-26T09:11:00.170868+00:00","technologies":[{"name":"Arm Mbed TLS","slug":"mbed-tls","vulnerabilities":13,"url":"https://junglewise.ai/threats/technologies/mbed-tls"},{"name":"Arm 5th Gen GPU Architecture Kernel Driver","slug":"5th-gen-gpu-architecture-kernel-driver","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/5th-gen-gpu-architecture-kernel-driver"},{"name":"Arm Valhall GPU Kernel Driver","slug":"valhall-gpu-kernel-driver","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/valhall-gpu-kernel-driver"},{"name":"Arm Bifrost GPU Kernel Driver","slug":"bifrost-gpu-kernel-driver","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/bifrost-gpu-kernel-driver"},{"name":"Arm Mali Graphics Processing Unit (GPU)","slug":"mali-graphics-processing-unit-gpu","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/mali-graphics-processing-unit-gpu"}]}