ZDI-CAN-18975: ZDI-23-237: Unity Technologies Unity Editor SKP File Parsing Use-After-Free Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Unity Technologies Unity Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-18975?
ZDI-CAN-18975 is classified as a vulnerability that can result in the disclosure of sensitive information.
How do I fix ZDI-CAN-18975?
To fix ZDI-CAN-18975, ensure that you update to the latest version of Unity Technologies Unity Editor.
What kind of exploit can occur with ZDI-CAN-18975?
ZDI-CAN-18975 can be exploited by remote attackers to disclose sensitive information through a malicious page or file.
What type of interaction is required to exploit ZDI-CAN-18975?
Exploitation of ZDI-CAN-18975 requires user interaction, specifically visiting a malicious page or opening a malicious file.
Which software is affected by ZDI-CAN-18975?
ZDI-CAN-18975 affects installations of Unity Technologies Unity Editor.