Skip to main content

Arm

Vendor security scorecard – 2 CVEs in the selected period

Period: 30d 90d 6m 1y All
Risk 28
2
CVEs
2
Critical
0
High
0
KEV
1
PoC
0
Unpatched C/H
100.0%
Patch Rate
0.0%
Avg EPSS

Severity Breakdown

CRITICAL
2
HIGH
0
MEDIUM
0
LOW
0

Monthly CVE Trend

Top Risky CVEs

CVE Summary Severity CVSS EPSS Priority Signals
CVE-2025-10263 Cross-exception-level write access in multiple Arm CPU cores including Cortex-A76 through Cortex-X925, Neoverse N1/N2/V1/V2/V3/V3AE, and C1-Ultra/Premium designs allows a lower-privileged context to modify resources owned by a higher exception level due to a race condition (CWE-362). Tracked also as Xen XSA-493 and EUVD-2025-210084, the issue carries a CVSS of 9.1 reflecting high confidentiality and integrity impact, though there is no public exploit identified at time of analysis and the EPSS score of 0.02% (4th percentile) indicates very low predicted exploitation probability. CRITICAL 9.1 0.0% 66
PoC
CVE-2026-34877 Mbed TLS versions 2.19.0 through 3.6.5 and 4.0.0 allow remote code execution through memory corruption when attackers modify serialized SSL context or session structures. The vulnerability stems from insufficient validation of deserialized data, enabling arbitrary code execution on systems using affected versions. CISA KEV status and active exploitation data not confirmed in provided intelligence. CRITICAL 9.8 0.1% 49

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy