{"id":"CVE-2025-10263","title":"Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may all…","summary":"Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may all…","severity":"critical","cvss":9.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cwe":["CWE-362","CWE-266"],"published":"2026-06-09","updated":"2026-07-03","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-10263","references":[{"url":"https://developer.arm.com/documentation/112137","label":"arm-security@arm.com"},{"url":"http://www.openwall.com/lists/oss-security/2026/06/09/13","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xenbits.xen.org/xsa/advisory-493.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2026:34911","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/security/cve/CVE-2025-10263","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2486958","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-10263.json","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-10263"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10263"},{"url":"https://access.redhat.com/errata/RHSA-2026:54205"},{"url":"https://access.redhat.com/errata/RHSA-2026:54187"},{"url":"https://access.redhat.com/errata/RHSA-2026:56786"},{"url":"https://access.redhat.com/errata/RHSA-2026:56911"},{"url":"https://access.redhat.com/errata/RHSA-2026:56853"},{"url":"https://access.redhat.com/errata/RHSA-2026:60019"},{"url":"https://access.redhat.com/errata/RHSA-2026:54544"},{"url":"https://access.redhat.com/errata/RHSA-2026:54553"},{"url":"https://access.redhat.com/errata/RHSA-2026:54581"},{"url":"https://access.redhat.com/errata/RHSA-2026:54599"},{"url":"https://access.redhat.com/errata/RHSA-2026:40764"},{"url":"https://access.redhat.com/errata/RHSA-2026:55445"},{"url":"https://access.redhat.com/errata/RHSA-2026:51603"},{"url":"https://access.redhat.com/errata/RHSA-2026:51746"},{"url":"https://access.redhat.com/errata/RHSA-2026:49031"},{"url":"https://access.redhat.com/errata/RHSA-2026:36018"},{"url":"https://access.redhat.com/errata/RHSA-2026:36349"},{"url":"https://access.redhat.com/errata/RHSA-2026:47248"},{"url":"https://access.redhat.com/errata/RHSA-2026:49033"},{"url":"https://access.redhat.com/errata/RHSA-2026:52649"},{"url":"https://access.redhat.com/errata/RHSA-2026:36348"},{"url":"https://access.redhat.com/errata/RHSA-2026:51604"}],"tags":["nvd","csaf","vex","red-hat","exploit-available"],"epss":0.00544,"epssPercentile":0.45462,"ingestedAt":"2026-07-03T14:03:37.081Z","vendor":"Red Hat","product":"Red Hat Enterprise Linux BaseOS E4S (v.9.4)","affected":["enterprise_linux 9","enterprise_linux_for_nvidia 26","openshift_container_platform 4.12","openshift_container_platform 4.13","openshift_container_platform 4.14","openshift_container_platform 4.15","openshift_container_platform 4.16","openshift_container_platform 4.17","openshift_container_platform 4.18","openshift_container_platform 4.19","openshift_container_platform 4.20","openshift_container_platform 4.21","openshift_container_platform 4.22","enterprise_linux_appstream_eus_v_10_0","enterprise_linux_appstream_v_10","enterprise_linux_appstream_e4s_v_9_2","enterprise_linux_appstream_e4s_v_9_4","enterprise_linux_appstream_eus_v_9_6","enterprise_linux_appstream_v_9","enterprise_linux_baseos_eus_v_10_0","enterprise_linux_baseos_v_10","enterprise_linux_baseos_v_8","enterprise_linux_baseos_aus_v_8_4","enterprise_linux_baseos_eus_extension_v_8_4","enterprise_linux_baseos_aus_v_8_6","enterprise_linux_baseos_eus_extension_v_8_6","enterprise_linux_baseos_e4s_v_8_8","enterprise_linux_baseos_tus_v_8_8","enterprise_linux_baseos_e4s_v_9_2","enterprise_linux_baseos_e4s_v_9_4","enterprise_linux_baseos_eus_v_9_6","enterprise_linux_baseos_v_9","enterprise_linux_codeready_linux_builder_eus_v_10_0","enterprise_linux_codeready_linux_builder_v_10","enterprise_linux_crb_v_8","codeready_linux_builder_eus_v_9_6","enterprise_linux_codeready_linux_builder_v_9","enterprise_linux_real_time_for_nfv_eus_v_10_0","enterprise_linux_real_time_for_nfv_v_10","enterprise_linux_nfv_v_8"],"patched":["openshift_container_platform 4.12","openshift_container_platform 4.13","openshift_container_platform 4.14","openshift_container_platform 4.15","openshift_container_platform 4.16","openshift_container_platform 4.17","openshift_container_platform 4.18","openshift_container_platform 4.19","openshift_container_platform 4.20","openshift_container_platform 4.21","openshift_container_platform 4.22","enterprise_linux_appstream_eus_v_10_0","enterprise_linux_appstream_v_10","enterprise_linux_appstream_e4s_v_9_2","enterprise_linux_appstream_e4s_v_9_4","enterprise_linux_appstream_eus_v_9_6","enterprise_linux_appstream_v_9","enterprise_linux_baseos_eus_v_10_0","enterprise_linux_baseos_v_10","enterprise_linux_baseos_v_8","enterprise_linux_baseos_aus_v_8_4","enterprise_linux_baseos_eus_extension_v_8_4","enterprise_linux_baseos_aus_v_8_6","enterprise_linux_baseos_eus_extension_v_8_6","enterprise_linux_baseos_e4s_v_8_8","enterprise_linux_baseos_tus_v_8_8","enterprise_linux_baseos_e4s_v_9_2","enterprise_linux_baseos_e4s_v_9_4","enterprise_linux_baseos_eus_v_9_6","enterprise_linux_baseos_v_9","enterprise_linux_codeready_linux_builder_eus_v_10_0","enterprise_linux_codeready_linux_builder_v_10","enterprise_linux_crb_v_8","codeready_linux_builder_eus_v_9_6","enterprise_linux_codeready_linux_builder_v_9","enterprise_linux_real_time_for_nfv_eus_v_10_0","enterprise_linux_real_time_for_nfv_v_10","enterprise_linux_nfv_v_8","enterprise_linux_real_time_for_nfv_e4s_v_9_2","enterprise_linux_real_time_for_nfv_e4s_v_9_4"],"scores":{"nvd":9.1,"vendor":8.4},"exploits":{"github":1,"githubRepos":["https://github.com/mikedejesushuembesrodriguez-max/erratumcheck"],"checkedAt":"2026-10-27T16:50:31.148Z"},"exploitAvailable":true,"slug":"CVE-2025-10263","body":"## Overview\n\nArm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may allow writes to resources owned by a higher exception level.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **RHSA-2026:54205** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.12 · released 2026-08-20 · [advisory](https://access.redhat.com/errata/RHSA-2026:54205)\n- **RHSA-2026:54187** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.13 · released 2026-08-20 · [advisory](https://access.redhat.com/errata/RHSA-2026:54187)\n- **RHSA-2026:56786** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.14 · released 2026-08-31 · [advisory](https://access.redhat.com/errata/RHSA-2026:56786)\n- **RHSA-2026:56911** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.15 · released 2026-08-31 · [advisory](https://access.redhat.com/errata/RHSA-2026:56911)\n- **RHSA-2026:56853** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.16 · released 2026-08-31 · [advisory](https://access.redhat.com/errata/RHSA-2026:56853)\n- **RHSA-2026:60019** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.17 · released 2026-09-03 · [advisory](https://access.redhat.com/errata/RHSA-2026:60019)\n- **RHSA-2026:54544** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.18 · released 2026-08-19 · [advisory](https://access.redhat.com/errata/RHSA-2026:54544)\n- **RHSA-2026:54553** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.19 · released 2026-08-19 · [advisory](https://access.redhat.com/errata/RHSA-2026:54553)\n- **RHSA-2026:54581** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.20 · released 2026-08-18 · [advisory](https://access.redhat.com/errata/RHSA-2026:54581)\n- **RHSA-2026:54599** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.21 · released 2026-08-18 · [advisory](https://access.redhat.com/errata/RHSA-2026:54599)\n- **RHSA-2026:40764** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.22 · released 2026-07-21 · [advisory](https://access.redhat.com/errata/RHSA-2026:40764)\n- **Red Hat VEX** · Important · affected: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux for NVIDIA 26 · no fix planned: Red Hat Enterprise Linux for NVIDIA 26, Red Hat Enterprise Linux 9 · updated 2026-10-09 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-10263.json)","depth":"abyssal","depthScore":62,"depthScoreParts":{"impact":50.1,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":228400,"id":"CVE-2025-10263","ts":1792801315564,"field":"exploit_available","old":"false","new":"true"}]}