7
CVEs
2
Critical
1
High
0
KEV
1
PoC
1
Unpatched C/H
28.6%
Patch Rate
0.0%
Avg EPSS
Severity Breakdown
CRITICAL
2
HIGH
1
MEDIUM
3
LOW
1
Monthly CVE Trend
Affected Products (30)
Valhall Gpu Kernel Driver
41
Mbed Tls
34
Bifrost Gpu Kernel Driver
26
5th Gen Gpu Architecture Kernel Driver
21
Debian Linux
19
Midgard Gpu Kernel Driver
13
Fedora
13
Mbed Os
7
Atom C
6
Xeon E5 2648L V4
6
Xeon E3 1258L V4
6
Xeon E5 2470 V2
6
Xeon E3 1240 V6
6
Xeon E5 2620 V3
6
Xeon E5 2609
6
Xeon E5 2637 V3
6
Xeon E5 1660 V4
6
Xeon E3 1275 V3
6
Xeon E5 2428L
6
Xeon E3 1275 V5
6
Xeon E5 1680 V4
6
Xeon E5 2407 V2
6
Xeon E3 1285 V4
6
Celeron J
6
Xeon E5 2630L
6
Xeon E3 1276 V3
6
Xeon E5 2418L V3
6
Xeon E5 2630 V4
6
Xeon E3 1245 V6
6
Xeon E3 1240L V5
6
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2025-10263 | Cross-exception-level write access in multiple Arm CPU cores including Cortex-A76 through Cortex-X925, Neoverse N1/N2/V1/V2/V3/V3AE, and C1-Ultra/Premium designs allows a lower-privileged context to modify resources owned by a higher exception level due to a race condition (CWE-362). Tracked also as Xen XSA-493 and EUVD-2025-210084, the issue carries a CVSS of 9.1 reflecting high confidentiality and integrity impact, though there is no public exploit identified at time of analysis and the EPSS score of 0.02% (4th percentile) indicates very low predicted exploitation probability. | CRITICAL | 9.1 | 0.0% | 66 |
PoC
|
| CVE-2026-34877 | Mbed TLS versions 2.19.0 through 3.6.5 and 4.0.0 allow remote code execution through memory corruption when attackers modify serialized SSL context or session structures. The vulnerability stems from insufficient validation of deserialized data, enabling arbitrary code execution on systems using affected versions. CISA KEV status and active exploitation data not confirmed in provided intelligence. | CRITICAL | 9.8 | 0.1% | 49 |
|
| CVE-2025-0647 | In certain Arm CPUs, a CPP RCTX instruction executed on one Processing Element (PE) may inhibit TLB invalidation when a TLBI is issued to the PE, either by the same PE or another PE in the shareability domain. [CVSS 7.9 HIGH] | HIGH | 7.9 | 0.0% | 40 |
No patch
|
| CVE-2025-2879 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU processing operations to expose sensitive data.This issue affects Valhall GPU Kernel Driver: from r29p0 through r49p4, from r50p0 through r54p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p4, from r50p0 through r54p0. | MEDIUM | 5.1 | 0.0% | 26 |
No patch
|
| CVE-2025-6349 | Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to gain access to already freed memory.This issue affects Valhall GPU Kernel Driver: from r53p0 through r54p1; Arm 5th Gen GPU Architecture Kernel Driver: from r53p0 through r54p1. | MEDIUM | 5.1 | 0.0% | 26 |
No patch
|
| CVE-2025-8045 | Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU processing operations to gain access to already freed memory.This issue affects Valhall GPU Kernel Driver: from r53p0 through r54p1; Arm 5th Gen GPU Architecture Kernel Driver: from r53p0 through r54p1. | MEDIUM | 4.0 | 0.0% | 20 |
No patch
|
| CVE-2026-0995 | An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to ensure the completion of memory accesses related to SME. [CVSS 3.6 LOW] | LOW | 3.6 | 0.0% | 18 |
No patch
|