arduino vulnerabilities
11 published CVEs name arduino among the affected products.
- 11Published CVEs11 of them scored
- 5Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-48490
ArduinoCore-AVR: Stack-Based Buffer Overflow in String float/double concatenation handler
arduino · ArduinoCore-avr
Medium6.9 - CVE-2026-25933
Arduino App Lab has Improper Data Validation in Internal Terminal Interface
arduino · arduino-app-lab
Medium6.9 - CVE-2025-69209
ArduinoCore-avr has Stack-Based Buffer Overflow in WString Float/Double Constructors
arduino · ArduinoCore-avr
Medium6.9 - CVE-2025-64724
Arduino IDE for macOS has Insecure File Permissions
arduino · arduino-ide
Medium4.8 - CVE-2025-64723
Arduino IDE for macOS has TCC Bypass via Dynamic Library Injection
arduino · arduino-ide
Medium4.8 - CVE-2025-27608
Self Cross-Site Scripting in Arduino IDE
arduino · arduino-ide
Low1.0 - CVE-2023-49296
Arduino Create Agent vulnerable to Reflected Cross-Site Scripting
arduino · arduino-create-agent
Medium6.3 - CVE-2023-43800
Insufficient Verification of Data Authenticity in Arduino Create Agent
arduino · arduino-create-agent
High7.3 - CVE-2023-43801
Path traversal in Arduino Create Agent
arduino · arduino-create-agent
Medium6.1 - CVE-2023-43802
Path traversal in Arduino Create Agent
arduino · arduino-create-agent
High7.1