arduino

Products

Exploited and recent CVEs

• CVE-2026-48490 Medium 6.9 ArduinoCore-AVR: Stack-Based Buffer Overflow in String float/double concatenation handler 0.7%
• CVE-2026-25933 Medium 6.9 Arduino App Lab has Improper Data Validation in Internal Terminal Interface 0.2%
• CVE-2025-69209 Medium 6.9 ArduinoCore-avr has Stack-Based Buffer Overflow in WString Float/Double Constructors 0.2%
• CVE-2025-64724 Medium 4.8 Arduino IDE for macOS has Insecure File Permissions 0.1%
• CVE-2025-64723 Medium 4.8 Arduino IDE for macOS has TCC Bypass via Dynamic Library Injection 0.1%
• CVE-2025-27608 Low 1.0 Self Cross-Site Scripting in Arduino IDE 0.2%
• CVE-2023-49296 Medium 6.3 Arduino Create Agent vulnerable to Reflected Cross-Site Scripting 0.3%
• CVE-2023-43800 High 7.3 Insufficient Verification of Data Authenticity in Arduino Create Agent 0.2%
• CVE-2023-43801 Medium 6.1 Path traversal in Arduino Create Agent 0.3%
• CVE-2023-43802 High 7.1 Path traversal in Arduino Create Agent 0.4%
• CVE-2023-43803 Medium 6.1 Path traversal in Arduino Create Agent 0.3%