CVE-2025-10263
- State
- Published
- Severity
- 9.1 Critical
- Published
- Jun 9, 2026
- Updated
- Sep 4, 2026
- Reserved
- Sep 11, 2025
Description
Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may allow writes to resources owned by a higher exception level.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.1 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N | CISA-ADP |
| 3.1 | 8.4 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N | redhat-SADP |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
C1-UltraArm |
|
C1-PremiumArm |
|
Neoverse V3Arm |
|
Neoverse V3AEArm |
|
Neoverse V1Arm |
|
Neoverse N2Arm |
|
Neoverse N1Arm |
|
Cortex-X925Arm |
|
Cortex-X4Arm |
|
Cortex-X3Arm |
|
Cortex-X2Arm |
|
Cortex-X1Arm |
|
Cortex-X1CArm |
|
Cortex-A710Arm |
|
Cortex-A78Arm |
|
Cortex-A78AEArm |
|
Cortex-A78CArm |
|
Cortex-A77Arm |
|
Cortex-A76Arm |
|
Cortex-A76AEArm |
|
References
- https://developer.arm.com/documentation/112137
- http://xenbits.xen.org/xsa/advisory-493.html
- http://www.openwall.com/lists/oss-security/2026/06/09/13
- https://access.redhat.com/security/cve/CVE-2025-10263vdb-entry
- RHBZ#2486958issue-tracking
- https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-10263.json
- https://access.redhat.com/errata/RHSA-2026:54205vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:54187vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:56786vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:56911vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:56853vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:60019vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:54544vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:54553vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:54581vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:54599vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:40764vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:55445vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:34911vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:51603vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:51746vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:49031vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:36018vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:36349vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:47248vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:49033vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:52649vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:36348vendor-advisory
- https://access.redhat.com/errata/RHSA-2026:51604vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.