Arm vulnerabilities

CVEs per yearBy the year they were published

1. 20171
2. 20223
3. 20243
4. 20255
5. 20263

Newest CVEs

• CVE-2025-10263

  Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 &…

  Arm · C1-Ultra

  Critical9.1
• CVE-2026-0995

  An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to ensure the completion of memory…

  Arm · C1 Pro

  Low3.6
• CVE-2025-0647

  In certain Arm CPUs, a CPP RCTX instruction executed on one Processing Element (PE) may inhibit TLB invalidation when a TLBI is issued to the PE, either by the…

  Arm · Neoverse-N2

  High7.9
• CVE-2025-7427

  Uncontrolled Search Path Element in Arm Development Studio before 2025

  Arm · Development Studio

  Medium5.9
• CVE-2024-7881

  An unprivileged context can trigger a data memory-dependent prefetch engine to fetch the contents of a privileged location and consume those contents as an…

  Arm · Neoverse V2

  Medium5.1
• CVE-2024-10929

  Spectre-BSE

  Arm · Cortex-A72

  Medium5.1
• CVE-2024-11864

  SCP-Firmware Vulnerability

  Arm · SCP-Firmware

  High7.5
• CVE-2024-11863

  SCP-Firmware Vulnerability

  Arm · SCP-Firmware

  Medium5.3
• CVE-2024-5660

  Use of Hardware Page Aggregation (HPA) and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1,…

  Arm · Cortex-A77

  Critical9.8
• CVE-2024-9413

  The transport_message_handler function in SCP-Firmware release versions 2.11.0-2.15.0 does not properly handle errors, potentially allowing an Application…

  Arm · SCP-Firmware

  High8.0