https://patchfirst.co/vendor/arm/New and newly exploited Arm CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 13:00:36 GMThttps://patchfirst.co/cve/CVE-2024-4610/CVE-2024-4610#kevWed, 12 Jun 2024 00:00:00 GMTArm · Mali GPU Kernel Driver. In CISA KEV since 2024-06-12. ENISA EUVD lists it as exploited. EPSS 0.8% (higher than 55.4% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 54.5 of 100.kevT1068https://patchfirst.co/cve/CVE-2023-4211/CVE-2023-4211#kevTue, 03 Oct 2023 00:00:00 GMTArm · Mali GPU Kernel Driver. In CISA KEV since 2023-10-03. ENISA EUVD lists it as exploited. EPSS 1.1% (higher than 65.6% of CVEs). CVSS 5.5 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1005 Data from Local System. Priority 55.0 of 100.kevT1068T1005https://patchfirst.co/cve/CVE-2021-29256/CVE-2021-29256#kevFri, 07 Jul 2023 00:00:00 GMTArm · Mali Graphics Processing Unit (GPU). In CISA KEV since 2023-07-07. ENISA EUVD lists it as exploited. EPSS 3.0% (higher than 87.3% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1005 Data from Local System. Priority 61.6 of 100.kevT1068T1005https://patchfirst.co/cve/CVE-2023-26083/CVE-2023-26083#kevFri, 07 Apr 2023 00:00:00 GMTArm · Mali Graphics Processing Unit (GPU). In CISA KEV since 2023-04-07. ENISA EUVD lists it as exploited. EPSS 1.2% (higher than 68.6% of CVEs). CVSS 3.3 LOW. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1005 Data from Local System. Priority 59.0 of 100.kevpublic-exploitT1068T1005https://patchfirst.co/cve/CVE-2022-38181/CVE-2022-38181#kevThu, 30 Mar 2023 00:00:00 GMTArm · Mali Graphics Processing Unit (GPU). In CISA KEV since 2023-03-30. ENISA EUVD lists it as exploited. EPSS 18.5% (higher than 97.2% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1005 Data from Local System. Priority 68.6 of 100.kevpublic-exploitT1068T1005https://patchfirst.co/cve/CVE-2022-22706/CVE-2022-22706#kevThu, 30 Mar 2023 00:00:00 GMTArm · Mali Graphics Processing Unit (GPU). In CISA KEV since 2023-03-30. ENISA EUVD lists it as exploited. EPSS 1.1% (higher than 64.6% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 61.4 of 100.kevpublic-exploitT1068https://patchfirst.co/cve/CVE-2021-28663/CVE-2021-28663#kevWed, 03 Nov 2021 00:00:00 GMTArm · Mali Graphics Processing Unit (GPU). In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 12.1% (higher than 96.1% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 68.4 of 100.kevpublic-exploitT1068https://patchfirst.co/cve/CVE-2021-28664/CVE-2021-28664#kevWed, 03 Nov 2021 00:00:00 GMTArm · Mali Graphics Processing Unit (GPU). In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 5.4% (higher than 92.7% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 67.7 of 100.kevpublic-exploitT1068https://patchfirst.co/cve/CVE-2021-27562/CVE-2021-27562#kevWed, 03 Nov 2021 00:00:00 GMTArm · Trusted Firmware. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 3.1% (higher than 87.6% of CVEs). CVSS 5.5 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1499.004 Application or System Exploitation. Priority 59.4 of 100.kevT1068T1499.004