Strix
26.1K

CVE-2025-10263

CRITICALCVSS 9.1/10EPSS 0.57%

Last modified

CVE-2025-10263 is a critical-severity vulnerability rated 9.1/10 on the CVSS scale. Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may allow writes to resources owned by a higher exception level.. EPSS estimates a 0.57% chance of exploitation in the next 30 days.

Description

Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may allow writes to resources owned by a higher exception level.

Metrics

CVSS 3.1
9.1/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS Probability
0.57%

44.1th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
ArmC1-UltraAll versions
ArmC1-PremiumAll versions
ArmNeoverse V3All versions
ArmNeoverse V3AEAll versions
ArmNeoverse V1All versions
ArmNeoverse N2All versions
ArmNeoverse N1All versions
ArmCortex-X925All versions
ArmCortex-X4All versions
ArmCortex-X3All versions
ArmCortex-X2All versions
ArmCortex-X1All versions
ArmCortex-X1CAll versions
ArmCortex-A710All versions
ArmCortex-A78All versions
ArmCortex-A78AEAll versions
ArmCortex-A78CAll versions
ArmCortex-A77All versions
ArmCortex-A76All versions
ArmCortex-A76AEAll versions

References

Timeline

Published
Last Modified
Status
Awaiting Analysis

Frequently Asked Questions

What is CVE-2025-10263?
Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may allow writes to resources owned by a higher exception level.
How severe is CVE-2025-10263?
CVE-2025-10263 has a CVSS score of 9.1/10 (CRITICAL severity). The EPSS model estimates a 0.57% probability of exploitation in the next 30 days.
How do I fix CVE-2025-10263?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2025

View all 2025CVEs →

Are you affected by CVE-2025-10263?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST