{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Arm vulnerabilities","home_page_url":"https://patchfirst.co/vendor/arm/","feed_url":"https://patchfirst.co/feed/vendor/arm.json","description":"New and newly exploited Arm CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2024-4610#kev","url":"https://patchfirst.co/cve/CVE-2024-4610/","title":"[KEV] CVE-2024-4610: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","content_text":"Arm · Mali GPU Kernel Driver. In CISA KEV since 2024-06-12. ENISA EUVD lists it as exploited. EPSS 0.8% (higher than 55.4% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 54.5 of 100.","summary":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","date_published":"2024-06-12T00:00:00.000Z","date_modified":"2026-06-17T08:02:15.000Z","tags":["kev","T1068"],"_patchfirst":{"reason":"kev","priority":54.5,"kev":{"dateAdded":"2024-06-12","ransomware":false},"epss":{"score":0.00764,"percentile":0.55384},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Arm","product":"Mali GPU Kernel Driver","techniqueIds":["T1068"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-4211#kev","url":"https://patchfirst.co/cve/CVE-2023-4211/","title":"[KEV] CVE-2023-4211: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","content_text":"Arm · Mali GPU Kernel Driver. In CISA KEV since 2023-10-03. ENISA EUVD lists it as exploited. EPSS 1.1% (higher than 65.6% of CVEs). CVSS 5.5 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1005 Data from Local System. Priority 55.0 of 100.","summary":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","date_published":"2023-10-03T00:00:00.000Z","date_modified":"2026-06-17T06:37:19.000Z","tags":["kev","T1068","T1005"],"_patchfirst":{"reason":"kev","priority":55,"kev":{"dateAdded":"2023-10-03","ransomware":false},"epss":{"score":0.01098,"percentile":0.65609},"cvss":{"score":5.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Arm","product":"Mali GPU Kernel Driver","techniqueIds":["T1068","T1005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2021-29256#kev","url":"https://patchfirst.co/cve/CVE-2021-29256/","title":"[KEV] CVE-2021-29256: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","content_text":"Arm · Mali Graphics Processing Unit (GPU). In CISA KEV since 2023-07-07. ENISA EUVD lists it as exploited. EPSS 3.0% (higher than 87.3% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1005 Data from Local System. Priority 61.6 of 100.","summary":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","date_published":"2023-07-07T00:00:00.000Z","date_modified":"2026-06-17T03:47:27.000Z","tags":["kev","T1068","T1005"],"_patchfirst":{"reason":"kev","priority":61.6,"kev":{"dateAdded":"2023-07-07","ransomware":false},"epss":{"score":0.02988,"percentile":0.87297},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Arm","product":"Mali Graphics Processing Unit (GPU)","techniqueIds":["T1068","T1005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-26083#kev","url":"https://patchfirst.co/cve/CVE-2023-26083/","title":"[KEV] CVE-2023-26083: Arm Mali GPU Kernel Driver Information Disclosure Vulnerability","content_text":"Arm · Mali Graphics Processing Unit (GPU). In CISA KEV since 2023-04-07. ENISA EUVD lists it as exploited. EPSS 1.2% (higher than 68.6% of CVEs). CVSS 3.3 LOW. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1005 Data from Local System. Priority 59.0 of 100.","summary":"Arm Mali GPU Kernel Driver Information Disclosure Vulnerability","date_published":"2023-04-07T00:00:00.000Z","date_modified":"2026-06-17T05:42:38.000Z","tags":["kev","public-exploit","T1068","T1005"],"_patchfirst":{"reason":"kev","priority":59,"kev":{"dateAdded":"2023-04-07","ransomware":false},"epss":{"score":0.01218,"percentile":0.68597},"cvss":{"score":3.3,"severity":"LOW","version":"3.1"},"vendor":"Arm","product":"Mali Graphics Processing Unit (GPU)","techniqueIds":["T1068","T1005"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-38181#kev","url":"https://patchfirst.co/cve/CVE-2022-38181/","title":"[KEV] CVE-2022-38181: Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","content_text":"Arm · Mali Graphics Processing Unit (GPU). In CISA KEV since 2023-03-30. ENISA EUVD lists it as exploited. EPSS 18.5% (higher than 97.2% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1005 Data from Local System. Priority 68.6 of 100.","summary":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","date_published":"2023-03-30T00:00:00.000Z","date_modified":"2026-06-17T04:56:14.000Z","tags":["kev","public-exploit","T1068","T1005"],"_patchfirst":{"reason":"kev","priority":68.6,"kev":{"dateAdded":"2023-03-30","ransomware":false},"epss":{"score":0.18461,"percentile":0.97237},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Arm","product":"Mali Graphics Processing Unit (GPU)","techniqueIds":["T1068","T1005"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-22706#kev","url":"https://patchfirst.co/cve/CVE-2022-22706/","title":"[KEV] CVE-2022-22706: Arm Mali GPU Kernel Driver Unspecified Vulnerability","content_text":"Arm · Mali Graphics Processing Unit (GPU). In CISA KEV since 2023-03-30. ENISA EUVD lists it as exploited. EPSS 1.1% (higher than 64.6% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 61.4 of 100.","summary":"Arm Mali GPU Kernel Driver Unspecified Vulnerability","date_published":"2023-03-30T00:00:00.000Z","date_modified":"2026-06-17T04:28:50.000Z","tags":["kev","public-exploit","T1068"],"_patchfirst":{"reason":"kev","priority":61.4,"kev":{"dateAdded":"2023-03-30","ransomware":false},"epss":{"score":0.01062,"percentile":0.64576},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Arm","product":"Mali Graphics Processing Unit (GPU)","techniqueIds":["T1068"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-28663#kev","url":"https://patchfirst.co/cve/CVE-2021-28663/","title":"[KEV] CVE-2021-28663: Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability","content_text":"Arm · Mali Graphics Processing Unit (GPU). In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 12.1% (higher than 96.1% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 68.4 of 100.","summary":"Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T03:46:43.000Z","tags":["kev","public-exploit","T1068"],"_patchfirst":{"reason":"kev","priority":68.4,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.12084,"percentile":0.96139},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Arm","product":"Mali Graphics Processing Unit (GPU)","techniqueIds":["T1068"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-28664#kev","url":"https://patchfirst.co/cve/CVE-2021-28664/","title":"[KEV] CVE-2021-28664: Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability","content_text":"Arm · Mali Graphics Processing Unit (GPU). In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 5.4% (higher than 92.7% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 67.7 of 100.","summary":"Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T03:46:43.000Z","tags":["kev","public-exploit","T1068"],"_patchfirst":{"reason":"kev","priority":67.7,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.05407,"percentile":0.92679},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Arm","product":"Mali Graphics Processing Unit (GPU)","techniqueIds":["T1068"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2021-27562#kev","url":"https://patchfirst.co/cve/CVE-2021-27562/","title":"[KEV] CVE-2021-27562: Arm Trusted Firmware Out-of-Bounds Write Vulnerability","content_text":"Arm · Trusted Firmware. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 3.1% (higher than 87.6% of CVEs). CVSS 5.5 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1499.004 Application or System Exploitation. Priority 59.4 of 100.","summary":"Arm Trusted Firmware Out-of-Bounds Write Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T03:45:08.000Z","tags":["kev","T1068","T1499.004"],"_patchfirst":{"reason":"kev","priority":59.4,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.0306,"percentile":0.87589},"cvss":{"score":5.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Arm","product":"Trusted Firmware","techniqueIds":["T1068","T1499.004"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}}]}