Vulnerabilities

TI-2025-37031 CVE-2025-59489 · GHSA-427p-ppg4-cg5q

Untrusted search path in Unity3D Unity Editor

HIGH 72

Unity Runtime before 2025-10-02 on Android, Windows, macOS, and Linux allows argument injection that can result in loading of library code from an unintended location.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00644 Published 2025-10-03 Fixed in 6000.3.0b4, 6000.2.6f2 +19 CWE-88

TI-2019-06655 CVE-2019-9197 · GHSA-m5h9-mxf6-88jj

The com.unity3d.kharma protocol handler in Unity Editor 2018.3 allows remote attackers to execute arbitrary code.

MEDIUM 44

The com.unity3d.kharma protocol handler in Unity Editor 2018.3 allows remote attackers to execute arbitrary code.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03744 Published 2019-12-31 No fix listed CWE-78

TI-2017-09584 CVE-2017-12939 · GHSA-qmw4-xq8q-x737

A Remote Code Execution vulnerability was identified in all Windows versions of Unity…

MEDIUM 50

A Remote Code Execution vulnerability was identified in all Windows versions of Unity Editor, e.g., before 5.3.8p2, 5.4.x before 5.4.5p5, 5.5.x before 5.5.4p3, 5.6.x before 5.6.3p1, and 2017.x before 2017.1.0p4.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04733 Published 2017-08-18 No fix listed CWE-20

Vulnerabilities

Filters

Untrusted search path in Unity3D Unity Editor

The com.unity3d.kharma protocol handler in Unity Editor 2018.3 allows remote attackers to execute arbitrary code.

A Remote Code Execution vulnerability was identified in all Windows versions of Unity…