CVE-2025-64724

Arduino IDE is an integrated development environment. Prior to version 2.3.7, Arduino IDE for macOS is installed with world-writable file permissions on sensitive application components, allowing any local user to replace legitimate files with malicious code. When another user launches the...

CVE-2025-64724

Summary: CVE-2025-64724 affects Arduino IDE for macOS before version 2.3.7. The vulnerable component(s) are the application files installed with world-writable permissions, enabling any local user to replace legitimate files with malicious code. When a different local user launches the IDE, the i...