CVE-2025-64723

🗓️ 18 Dec 2025 15:15:15Reported by GitHub_MType

Arduino IDE for Mac prior to version two point three seven had permissive entitlements enabling dynamic library injection to bypass Hardened Runtime and access TCC permissions.

Reporter	Title	Published	Views	Family All 8
CNNVD	Arduino IDE 安全漏洞	18 Dec 202500:00	–	cnnvd
Cvelist	CVE-2025-64723 Arduino IDE for macOS has TCC Bypass via Dynamic Library Injection	18 Dec 202515:15	–	cvelist
EUVD	EUVD-2025-204309	18 Dec 202515:15	–	euvd
NVD	CVE-2025-64723	18 Dec 202516:15	–	nvd
OSV	CVE-2025-64723 Arduino IDE for macOS has TCC Bypass via Dynamic Library Injection	18 Dec 202515:15	–	osv
Positive Technologies	PT-2025-52244	18 Dec 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-64723	19 Dec 202515:16	–	redhatcve
Vulnrichment	CVE-2025-64723 Arduino IDE for macOS has TCC Bypass via Dynamic Library Injection	18 Dec 202515:15	–	vulnrichment

NVD

Vulners

Node

arduino arduino_ideRange<2.3.7

AND

apple macosMatch-

[
  {
    "vendor": "arduino",
    "product": "arduino-ide",
    "versions": [
      {
        "version": "< 2.3.7",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/arduino/arduino-ide/pull/2805
github	www.github.com/arduino/arduino-ide/security/advisories/GHSA-vf5j-xhwq-8vqj
github	www.github.com/arduino/arduino-ide/releases/tag/2.3.7
support	www.support.arduino.cc/hc/en-us/articles/24329484618652-ASEC-25-004-Arduino-IDE-v2-3-7-Resolves-Multiple-Vulnerabilities
github	www.github.com/arduino/arduino-ide/commit/1fa0fd31c8d6b62f19332e33713a8c5b0f4ed6f9

17 Jun 2026 09:55Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.14.4

CVSS 44.8

EPSS0.00106

SSVC

CWE-276