CVE-2025-64723 | Arduino arduino-ide up to 2.3.6 on macOS Hardened Runtime Protection default permission (GHSA-vf5j-xhwq-8vqj)

December 18, 2025 Yanac

A vulnerability categorized as critical has been discovered in Arduino arduino-ide up to 2.3.6 on macOS. Impacted is an unknown function of the component Hardened Runtime Protection. Executing manipulation can lead to incorrect default permissions.

This vulnerability appears as CVE-2025-64723. The attack requires local access. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More