CVE-2025-64723 Arduino IDE for macOS has TCC Bypass via Dynamic Library Injection

🗓️ 18 Dec 2025 15:15:15Reported by GoogleType

osv

osv🔗 osv.dev👁 7 Views

Before 2.3.7, macOS Arduino IDE could bypass Hardened Runtime via library injection to gain TCC access.

Reporter	Title	Published	Views	Family All 8
CNNVD	Arduino IDE 安全漏洞	18 Dec 202500:00	–	cnnvd
CVE	CVE-2025-64723	18 Dec 202515:15	–	cve
Cvelist	CVE-2025-64723 Arduino IDE for macOS has TCC Bypass via Dynamic Library Injection	18 Dec 202515:15	–	cvelist
EUVD	EUVD-2025-204309	18 Dec 202515:15	–	euvd
NVD	CVE-2025-64723	18 Dec 202516:15	–	nvd
Positive Technologies	PT-2025-52244	18 Dec 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-64723	19 Dec 202515:16	–	redhatcve
Vulnrichment	CVE-2025-64723 Arduino IDE for macOS has TCC Bypass via Dynamic Library Injection	18 Dec 202515:15	–	vulnrichment

Source	Link
github	www.github.com/arduino/arduino-ide/releases/tag/2.3.7
support	www.support.arduino.cc/hc/en-us/articles/24329484618652-ASEC-25-004-Arduino-IDE-v2-3-7-Resolves-Multiple-Vulnerabilities
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2025/64xxx/CVE-2025-64723.json
github	www.github.com/arduino/arduino-ide/security/advisories/GHSA-vf5j-xhwq-8vqj
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-64723
github	www.github.com/arduino/arduino-ide/commit/1fa0fd31c8d6b62f19332e33713a8c5b0f4ed6f9
github	www.github.com/arduino/arduino-ide/pull/2805

10 Apr 2026 05:33Current

6.6Medium risk

Vulners AI Score6.6

CVSS 44.8

EPSS0.00106

macOS TCC Bypass Dynamic Library Injection Hardened Runtime Old Entitlements Version 2.3.7 Arduino IDE