Read the docs

Unity

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Unity records in CISA KEV

No Unity vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Editor · all components

Priority HIGH 72

Unity Runtime before 2025-10-02 on Android, Windows, macOS, and Linux allows argument injection that can result in loading of library code from an unintended location.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00644 Published 2025-10-03 Fixed in 6000.3.0b4, 6000.2.6f2 +19 CWE-88
Open these records in search →