Unity Vulnerability Exposes Multiple Applications to Remote Code Execution Risks
Recently, Unity Technologies announced a significant security vulnerability affecting versions of its game engine dating back to 2017. This critical flaw, which allows for remote code execution (RCE), potentially exposes a vast number of applications and games dependent on Unity 2017.1 to cyber attacks. Although the company has issued patches in its latest software version, Microsoft has also released an advisory since numerous apps and services under its purview are affected.
Details of the Vulnerability: CVE-2025-59489
The vulnerability, tracked as CVE-2025-59489, has been assigned a CVSS severity score of 8.4 out of 10, highlighting the urgent need for remediation. Microsoft is actively assessing the extent of the impact on its apps and games while developing updates to address the vulnerability across the board.
Impacted Platforms and Recommendations
According to Microsoft’s assessment, the vulnerability affects Unity software installations on various platforms, including Windows, Android, Linux, and macOS. Fortunately, users operating on consoles, cloud gaming services, and iOS devices are not at risk. Notably, Microsoft Mesh, which utilizes Unity, is also compromised. Users of Microsoft Mesh are strongly advised to update to the latest software version to mitigate risks. It is recommended to update prior to participating in any scheduled events to ensure seamless connectivity.
List of Affected Microsoft Applications and Games
The following applications and games from Microsoft have been confirmed as affected by the Unity vulnerability, with updates being systematically rolled out:
- Microsoft Mesh PC Applications
- Pillars of Eternity
- Hearthstone
- Grounded 2 Artbook
- Zoo Tycoon Friends
- The Elder Scrolls: Legends
- Mighty Doom
- Halo Recruit
- Gears POP!
- Forza Customs
- DOOM II (2019)
- DOOM (2019)
- Wasteland Remastered
- Wasteland 3
- Warcraft Rumble
- The Elder Scrolls: Castles
- The Elder Scrolls: Blades
- The Elder Scrolls IV: Oblivion Remastered Companion App
- The Bard’s Tale Trilogy
- Starfield Companion App
- Pillars of Eternity: Hero Edition
- Pillars of Eternity: Definitive Edition
- Pillars of Eternity II: Deadfire – Ultimate Edition
- Pillars of Eternity II: Deadfire
- Knights and Bikes
- Ghostwide Tokyo Prelude
- Fallout Shelter
- DOOM: Dark Ages Companion App
- Avowed Artbook
What to Do If Your Game Is Not on the List
If your game is not included in the list above, there’s no immediate cause for alarm, provided you keep your software updated. If updates are not appearing, it is advisable to uninstall the game until an official patch is released. For more comprehensive information, refer to the official advisory here.
For ongoing updates on security patches and affected software, stay tuned to official communications from Microsoft and Unity.
Related Articles:
Windows 11 OOBE Permits Setting Default User Folder Name in a Complicated Way
9:26
Windows 11 25H2 Receives Highly Anticipated Dark Mode Enhancements and More in Latest Build
9:25
Windows 10 Final Patch Tuesday: Users May Face Tricky Situations
9:09
Leave a Reply