Unity reveals long-standing security vulnerability and urges developers to update their games.

Unity calls on developers to take urgent action following the discovery of a serious security vulnerability affecting games created using their popular tool since 2017. Although there is currently no evidence of exploitation of this vulnerability or its impact on users, the company is already providing relevant fixes.

According to a report by Larry Hryb, known as "Major Nelson," developers should take action if they have created or released a game or application using Unity version 2017.1 or later for Windows, Android, or macOS. Platform partners have also taken additional measures to protect their platforms and users. Valve has already updated Steam with measures to mitigate this vulnerability, and Microsoft Defender for Windows has received an update that allows it to detect and block this threat. Google and Meta have also implemented appropriate measures.

According to the Common Vulnerabilities and Exposures (CVE) database, if an application was built using a vulnerable version of the Unity Editor, an attacker could execute malicious code and steal confidential information from the device running the application. It is important to note that there is currently no evidence of this vulnerability being exploited on iOS, visionOS, tvOS, Xbox, Nintendo Switch, PlayStation, UWP, Quest, and WebGL platforms.