AR
Vendor
arduino
8 products with CVEs on record
19
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-48490
AR
ArduinoCore-avr
arduino
6.9
1%
Sep 11ArduinoCore-AVR: Stack-Based Buffer Overflow in String float/double concatenation handler
CVE-2026-25933
AR
arduino-app-lab
arduino
6.8
0%
Feb 12Arduino App Lab has Improper Data Validation in Internal Terminal Interface
CVE-2025-69209
AR
ArduinoCore-avr
arduino
6.9
0%
Jan 21ArduinoCore-avr has Stack-Based Buffer Overflow in WString Float/Double Constructors
CVE-2025-64724
AR
arduino-ide
arduino
7.3
0%
Dec 18Arduino IDE for macOS has Insecure File Permissions
CVE-2025-64723
AR
arduino-ide
arduino
4.4
0%
Dec 18Arduino IDE for macOS has TCC Bypass via Dynamic Library Injection
CVE-2025-27608
AR
arduino-ide
arduino
1.0
0%
Apr 2Self Cross-Site Scripting in Arduino IDE
CVE-2024-45798
AC
Arduino Core
Arduino
9.9
1%
Sep 17Multiple Poisoned Pipeline Execution (PPE) vulnerabilities
CVE-2023-49296
AR
arduino-create-agent
arduino
6.1
0%
Dec 13Arduino Create Agent vulnerable to Reflected Cross-Site Scripting
CVE-2023-43800
AR
arduino-create-agent
arduino
7.8
0%
Oct 18Insufficient Verification of Data Authenticity in Arduino Create Agent
CVE-2023-43801
AR
arduino-create-agent
arduino
7.1
0%
Oct 18Path traversal in Arduino Create Agent
CVE-2023-43802
AR
arduino-create-agent
arduino
7.8
0%
Oct 18Path traversal in Arduino Create Agent
CVE-2023-43803
AR
arduino-create-agent
arduino
7.1
0%
Oct 18Path traversal in Arduino Create Agent
CVE-2019-13991
AF
Arduino Firmware
Arduino
6.5
1%
Jul 19Embedded systems based on Arduino before Rev3 allow remote attackers to send data to LEDs (directly connected to GPIO pins) via a laser, because of LED photosensitivity