Cyberfeed6 › Vendors › Arm
CISA lists 9 Arm vulnerabilities as exploited in real attacks. Most entries concern Mali Graphics Processing Unit (GPU), Mali GPU Kernel Driver, Trusted Firmware.
Showing the 9 most recently added of 9. Check the vendor notice before you act: it names the fixed versions.
| Vulnerability | Product | Added to list | Severity | Ransomware | Fix |
|---|---|---|---|---|---|
| CVE-2024-4610Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | Mali GPU Kernel Driver | 2024-06-12 | High (7.4) | No | Vendor notice |
| CVE-2023-4211Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | Mali GPU Kernel Driver | 2023-10-03 | Medium (5.5) | No | Vendor notice |
| CVE-2021-29256Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | Mali Graphics Processing Unit (GPU) | 2023-07-07 | High (8.8) | No | Vendor notice |
| CVE-2023-26083Arm Mali GPU Kernel Driver Information Disclosure Vulnerability | Mali Graphics Processing Unit (GPU) | 2023-04-07 | Low (3.3) | No | Vendor notice |
| CVE-2022-38181Arm Mali GPU Kernel Driver Use-After-Free Vulnerability | Mali Graphics Processing Unit (GPU) | 2023-03-30 | High (8.8) | No | Vendor notice |
| CVE-2022-22706Arm Mali GPU Kernel Driver Unspecified Vulnerability | Mali Graphics Processing Unit (GPU) | 2023-03-30 | High (7.8) | No | Vendor notice |
| CVE-2021-28664Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability | Mali Graphics Processing Unit (GPU) | 2021-11-03 | High (8.8) | No | |
| CVE-2021-28663Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability | Mali Graphics Processing Unit (GPU) | 2021-11-03 | High (8.8) | No | |
| CVE-2021-27562Arm Trusted Firmware Out-of-Bounds Write Vulnerability | Trusted Firmware | 2021-11-03 | Medium (5.5) | No |
Source: CISA Known Exploited Vulnerabilities catalog, released 2026-11-04. Severity scores are CVSS where available. "Ransomware" means CISA has marked the flaw as known to be used in ransomware campaigns.