CVE-2019-9197

HIGH 8.8CVE-2019-9197 · Published 31/12/2019 · updated 17/06/2026

In short

CVE-2019-9197 is a HIGH (CVSS 8.8) vulnerability affecting unity editor (unity3d).
Chance of exploitation in the next 30 days (EPSS): 3.7%, higher than 89.9% of all vulnerabilities.
Fix: update to 2017.4.22f1, 2018.2.21f1, 2018.3.7f1, 2019.1.0b5 or later.

Package	Affected versions	Patched versions
unity editor unity3d	`≥ 2017.4.22, < 2017.4.22f1≥ 2018.2.21, < 2018.2.21f1≥ 2018.3.7, < 2018.3.7f1≥ 2019.1.0, < 2019.1.0b5≥ 2019.2.0, < 2019.2.0a7≥ 5.6.0, < 5.6.7f1`	`2017.4.22f12018.2.21f12018.3.7f12019.1.0b52019.2.0a75.6.7f1`

The com.unity3d.kharma protocol handler in Unity Editor 2018.3 allows remote attackers to execute arbitrary code.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.