Unity vulnerabilities
We track 3 vulnerabilities in Unity products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 4, 2026.
Latest Unity vulnerabilities
- 8.4 High severity
Parsec: Incorrect Use of Privileged APIs
An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a potential Elevation of Privilege. This issue affects Parsec through v2026-05-04.0. The patched version is Parsec for Windows version 150-104a. A user can generate a s
- 7.4 High severity
Unity Editor: Improper Neutralization of Argument Delimiters in a Command
Unity Runtime before 2025-10-02 on Android, Windows, macOS, and Linux allows argument injection that can result in loading of library code from an unintended location. If an application was built with a version of Unity Editor that had the vulnerable Unity Run
- 7.0 High severity
Parsec: Time-of-check Time-of-use (TOCTOU) Race Condition
Unity Parsec has a TOCTOU race condition that permits local attackers to escalate privileges to SYSTEM if Parsec was installed in "Per User" mode. The application intentionally launches DLLs from a user-owned directory but intended to always perform integrity