Arm: every exploited CVE on CISA KEV

All 9 Arm bugs attackers are confirmed to be using, with attack scores and free detection rules.

Generated by VEDAS. Scores as of 2026-11-01 19:19 UTC. Rebuilt every few hours from cve-scores, CISA KEV and vedas-signatures. How this works and its limits.

9

Arm bugs on CISA’s exploited list

0 added in 2026.

0 of 4

remotely exploitable ones have a free VEDAS detection rule

4 don’t yet; see detection gaps.

0

are linked to ransomware

Every Arm vulnerability the US government has confirmed attackers are using, newest first, with each bug’s EPSS (predicted attack chance) and VEDAS (exploit evidence) scores and any free Nuclei or Suricata detection rule. US federal agencies must fix KEV-listed bugs by a deadline; everyone else should treat the list as “patch first”.

AddedCVEProductBugEPSSVEDASDetection ruleRansomware
2024-06-12CVE-2024-4610Arm Mali GPU Kernel DriverArm Mali GPU Kernel Driver Use-After-Free Vulnerability0.010.69Out of scope (local)No
2023-10-03CVE-2023-4211Arm Mali GPU Kernel DriverArm Mali GPU Kernel Driver Use-After-Free Vulnerability0.010.98Out of scope (local)No
2023-07-07CVE-2021-29256Arm Mali Graphics Processing Unit (GPU)Arm Mali GPU Kernel Driver Use-After-Free Vulnerability0.030.52None yetNo
2023-04-07CVE-2023-26083Arm Mali Graphics Processing Unit (GPU)Arm Mali GPU Kernel Driver Information Disclosure Vulnerability0.010.51Out of scope (local)No
2023-03-30CVE-2022-38181Arm Mali Graphics Processing Unit (GPU)Arm Mali GPU Kernel Driver Use-After-Free Vulnerability0.180.97None yetNo
2023-03-30CVE-2022-22706Arm Mali Graphics Processing Unit (GPU)Arm Mali GPU Kernel Driver Unspecified Vulnerability0.010.98Out of scope (local)No
2021-11-03CVE-2021-28664Arm Mali Graphics Processing Unit (GPU)Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability0.050.52None yetNo
2021-11-03CVE-2021-28663Arm Mali Graphics Processing Unit (GPU)Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability0.120.98None yetNo
2021-11-03CVE-2021-27562Arm Trusted FirmwareArm Trusted Firmware Out-of-Bounds Write Vulnerability0.030.84Out of scope (local)No

Industry partners

Feasible SecurityAskealGoTrust