CVE-2025-10263Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C,…
Updated under an hour ago ()
Does this affect you?
It affects Arm C1-Ultra and 28 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may allow writes to resources owned by a higher exception level.
- CVSS
- 9.1 CRITICAL (v3.1, CISA ADP)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- Weakness (CWE)
- CWE-362, CWE-266
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Arm
- NVD analysis
- Awaiting Analysis
- Record last updated
- Sep 4, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Arm C1-Ultra arm:c1_ultra (from the name) | 0 | CNA record |
Arm C1-Premium arm:c1_premium (from the name) | 0 | CNA record |
Arm Neoverse V3 arm:neoverse_v3 (from the name) | 0 | CNA record |
Arm Neoverse V3AE arm:neoverse_v3ae (from the name) | 0 | CNA record |
Arm Neoverse V1 arm:neoverse_v1 (from the name) | 0 | CNA record |
Arm Neoverse N2 arm:neoverse_n2 (from the name) | 0 | CNA record |
Arm Neoverse N1 arm:neoverse_n1 (from the name) | 0 | CNA record |
Arm Cortex-X925 arm:cortex_x925 (from the name) | 0 | CNA record |
Arm Cortex-X4 arm:cortex_x4 (from the name) | 0 | CNA record |
Arm Cortex-X3 arm:cortex_x3 (from the name) | 0 | CNA record |
Arm Cortex-X2 arm:cortex_x2 (from the name) | 0 | CNA record |
Arm Cortex-X1 arm:cortex_x1 (from the name) | 0 | CNA record |
Arm Cortex-X1C arm:cortex_x1c (from the name) | 0 | CNA record |
Arm Cortex-A710 arm:cortex_a710 (from the name) | 0 | CNA record |
Arm Cortex-A78 arm:cortex_a78 (from the name) | 0 | CNA record |
Arm Cortex-A78AE arm:cortex_a78ae (from the name) | 0 | CNA record |
Arm Cortex-A78C arm:cortex_a78c (from the name) | 0 | CNA record |
Arm Cortex-A77 arm:cortex_a77 (from the name) | 0 | CNA record |
Arm Cortex-A76 arm:cortex_a76 (from the name) | 0 | CNA record |
Arm Cortex-A76AE arm:cortex_a76ae (from the name) | 0 | CNA record |
Red Hat Red Hat Enterprise Linux 10 redhat:enterprise_linux | from 0:6.12.0-211.30.1.el10_2 not affected | CISA ADP |
Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support redhat:enterprise_linux_eus | from 0:6.12.0-55.98.1.el10_0 not affected | CISA ADP |
from 0:4.18.0-305.200.1.el8_4 not affected | CISA ADP | |
Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On redhat:rhel_eus_long_life | from 0:4.18.0-305.200.1.el8_4 not affected | CISA ADP |
from 0:4.18.0-477.158.1.el8_8 not affected | CISA ADP | |
from 0:4.18.0-477.158.1.el8_8 not affected | CISA ADP | |
Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support redhat:rhel_eus | from 0:5.14.0-570.131.1.el9_6 not affected | CISA ADP |
Red Hat Red Hat OpenShift Container Platform 4.12 redhat:openshift | from 412.86.202608080425-0 not affected | CISA ADP |
Red Hat Red Hat Enterprise Linux for NVIDIA 26 redhat:enterprise_linux_nvidia | All versions | CISA ADP |
References
- https://developer.arm.com/documentation/112137
- http://www.openwall.com/lists/oss-security/2026/06/09/13
- http://xenbits.xen.org/xsa/advisory-493.html
- https://access.redhat.com/errata/RHSA-2026:34911
- https://access.redhat.com/errata/RHSA-2026:36018
- https://access.redhat.com/errata/RHSA-2026:36348
- https://access.redhat.com/errata/RHSA-2026:36349
- https://access.redhat.com/errata/RHSA-2026:40764
- https://access.redhat.com/errata/RHSA-2026:47248
- https://access.redhat.com/errata/RHSA-2026:49031
- https://access.redhat.com/errata/RHSA-2026:49033
- https://access.redhat.com/errata/RHSA-2026:51603
- https://access.redhat.com/errata/RHSA-2026:51604
- https://access.redhat.com/errata/RHSA-2026:51746
- https://access.redhat.com/errata/RHSA-2026:52649
- https://access.redhat.com/errata/RHSA-2026:54187
- https://access.redhat.com/errata/RHSA-2026:54205
- https://access.redhat.com/errata/RHSA-2026:54544
- https://access.redhat.com/errata/RHSA-2026:54553
- https://access.redhat.com/errata/RHSA-2026:54581
- https://access.redhat.com/errata/RHSA-2026:54599
- https://access.redhat.com/errata/RHSA-2026:55445
- https://access.redhat.com/errata/RHSA-2026:56786
- https://access.redhat.com/errata/RHSA-2026:56853
- https://access.redhat.com/errata/RHSA-2026:56911
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.