arduino vulnerabilities

CVEs per yearBy the year they were published

1. 20235
2. 20253
3. 20263

Newest CVEs

• CVE-2026-48490

  ArduinoCore-AVR: Stack-Based Buffer Overflow in String float/double concatenation handler

  arduino · ArduinoCore-avr

  Medium6.9
• CVE-2026-25933

  Arduino App Lab has Improper Data Validation in Internal Terminal Interface

  arduino · arduino-app-lab

  Medium6.9
• CVE-2025-69209

  ArduinoCore-avr has Stack-Based Buffer Overflow in WString Float/Double Constructors

  arduino · ArduinoCore-avr

  Medium6.9
• CVE-2025-64724

  Arduino IDE for macOS has Insecure File Permissions

  arduino · arduino-ide

  Medium4.8
• CVE-2025-64723

  Arduino IDE for macOS has TCC Bypass via Dynamic Library Injection

  arduino · arduino-ide

  Medium4.8
• CVE-2025-27608

  Self Cross-Site Scripting in Arduino IDE

  arduino · arduino-ide

  Low1.0
• CVE-2023-49296

  Arduino Create Agent vulnerable to Reflected Cross-Site Scripting

  arduino · arduino-create-agent

  Medium6.3
• CVE-2023-43800

  Insufficient Verification of Data Authenticity in Arduino Create Agent

  arduino · arduino-create-agent

  High7.3
• CVE-2023-43801

  Path traversal in Arduino Create Agent

  arduino · arduino-create-agent

  Medium6.1
• CVE-2023-43802

  Path traversal in Arduino Create Agent

  arduino · arduino-create-agent

  High7.1