Known vulnerabilities in Unity Editor
Vendor:
Unity Technologies
Software:
Unity Editor
Software CPE:
cpe:2.3:a:unity_technologies:unity_editor:*:*:*:*:*:*:*:*
Website:
https://unity.com/
Total vulnerabilities:
7
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
Vulnerabilities (7)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU116896 - Untrusted Search Path CVE-2025-59489 |
CWE-426 | Low | 2021.3.56f2, 2022.3.67f2, 6000.0.58f2, 6000.2.6f2, 6000.3.0b4 | 10.10.2025 |
SB2025101023 |
||
| #VU73758 - Heap-based Buffer Overflow |
CWE-122 | High | 2020.3.44f1, 2021.3.17f1, 2022.2.3f1, 2023.1.0a26 | 16.03.2023 |
SB2023031630 |
||
| #VU73757 - Use After Free |
CWE-416 | High | 2020.3.44f1, 2021.3.17f1, 2022.2.3f1, 2023.1.0a26 | 16.03.2023 |
SB2023031630 |
||
| #VU73756 - Out-of-bounds write |
CWE-787 | High | 2020.3.44f1, 2021.3.17f1, 2022.2.3f1, 2023.1.0a26 | 16.03.2023 |
SB2023031630 |
||
| #VU73755 - Use After Free |
CWE-416 | Low | 2020.3.44f1, 2021.3.17f1, 2022.2.3f1, 2023.1.0a26 | 16.03.2023 |
SB2023031630 |
||
| #VU73754 - Use After Free |
CWE-416 | High | 2020.3.44f1, 2021.3.17f1, 2022.2.3f1, 2023.1.0a26 | 16.03.2023 |
SB2023031630 |
||
| #VU73753 - Untrusted Pointer Dereference |
CWE-822 | High | 2020.3.44f1, 2021.3.17f1, 2022.2.3f1, 2023.1.0a26 | 16.03.2023 |
SB2023031630 |