Vulnerabilities

TI-2026-39300 CVE-2026-54424 · GHSA-f445-7g93-34v9

An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads…

LOW 38

An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a potential Elevation of Privilege.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00185 Published 2026-07-04 No fix listed CWE-648

TI-2025-37031 CVE-2025-59489 · GHSA-427p-ppg4-cg5q

Untrusted search path in Unity3D Unity Editor

HIGH 72

Unity Runtime before 2025-10-02 on Android, Windows, macOS, and Linux allows argument injection that can result in loading of library code from an unintended location.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00644 Published 2025-10-03 Fixed in 6000.3.0b4, 6000.2.6f2 +19 CWE-88

TI-2023-18880 CVE-2023-37250 · GHSA-v6gp-395w-jvcw

Unity Parsec has a TOCTOU race condition that permits local attackers to escalate…

LOW 33

Unity Parsec has a TOCTOU race condition that permits local attackers to escalate privileges to SYSTEM if Parsec was installed in "Per User" mode.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.003 Published 2023-08-20 No fix listed CWE-367

TI-2015-07665 CVE-2015-9288 · GHSA-3vgr-p5w4-7658

The Unity Web Player plugin before 4.6.6f2 and 5.x before 5.0.3f2 allows attackers to…

LOW 30

The Unity Web Player plugin before 4.6.6f2 and 5.x before 5.0.3f2 allows attackers to read messages or access online services via a victim's credentials

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00875 Published 2019-07-29 No fix listed CWE-200

Vulnerabilities

Filters

An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads…

Untrusted search path in Unity3D Unity Editor

Unity Parsec has a TOCTOU race condition that permits local attackers to escalate…

The Unity Web Player plugin before 4.6.6f2 and 5.x before 5.0.3f2 allows attackers to…