PatchTheCVEunity editor vulnerabilities and fixes
Recent CVEs affecting unity editor, with upgrade or downgrade steps. 2 tracked.
Also searched as: unityeditor.
unity editor has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2019-12-31. Highest priority: CVE-2017-12939 (score 62/100).
- CVE-2019-9197 HIGH 8.8 UPGRADE The com.unity3d.kharma protocol handler in Unity Editor 2018.3 allows remote attackers to execute arbitrary co
- CVE-2017-12939 CRITICAL 9.8 DOWNGRADE A Remote Code Execution vulnerability was identified in all Windows versions of Unity Editor, e.g., before 5.3
FAQ
How do I fix unity editor vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is unity editor being exploited right now?
None of the tracked unity editor CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which unity editor CVE should I patch first?
CVE-2017-12939 currently ranks highest (62/100): A Remote Code Execution vulnerability was identified in all Windows versions of Unity Editor, e.g., before 5.3.