Disclosure summary
Unity announced a security vulnerability (CVE-2025-59489) that is affecting games or applications built with the Unity Gaming Engine Editor (version 2017.1 or later). You may be using a Microsoft app or playing a Microsoft game that should be uninstalled until an update is available. We are working to update games and applications that are potentially affected by this Unity vulnerability. In most cases, you can stay safe by ensuring your games and applications are up to date and Microsoft Defender is running on your device. If you have downloaded a vulnerable game or app (see list below) on one of the following platforms, you could be at risk: Android Windows Linux (Desktop) Linux (embedded) MacOS We have confirmed the following are not impacted: Xbox consoles Xbox Cloud Gaming iOS HoloLens Recommended Next Steps: For Developers: Unity has made a fix available to developers. Organizations who believe that they have an app or game that might be impacted should reference Unity guidance and update their apps/games as soon as possible. You can learn more from Unity here. For Players and Customers: Microsoft security and game development teams are working to update any game or application that is potentially affected by this Unity vulnerability. If a Microsoft-owned game or application is not listed and you have installed all available updates, no further action is required. For customers who have automatic updates enabled, fixes will be deployed as they become available. If you have automatic updates turned off, please check to see if you have any updates available for your downloaded apps and games and install the latest update on your device. Customers who have an impacted app or game installed (see below list) are encouraged to take these steps: Temporarily uninstall any
Source-reported weakness categories
CWE-426
Source-specific records & product guidance
Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.
Microsoft Security Updates (CVRF) · 2025-Oct
Open original source · Updated Oct 07, 2025
MITRE: CVE-2025-59489 Unity Gaming Engine Editor vulnerability
Maximum of vendor-reported product scores; products and fixed builds are associations, not a universal affected-version statement.
Microsoft maximum product score: 8.4
| Vendor | Product / association | Version / bounds |
|---|---|---|
| Microsoft update guide | Avowed Artbook | (MSRC status code 3) |
| Microsoft update guide | DOOM: Dark Ages Companion App | (MSRC status code 3) |
| Microsoft update guide | Fallout Shelter | (MSRC status code 3) |
| Microsoft update guide | Ghostwide Tokyo Prelude | (MSRC status code 3) |
| Microsoft update guide | Knights and Bikes | (MSRC status code 3) |
| Microsoft update guide | Pillars of Eternity II: Deadfire | (MSRC status code 3) |
| Microsoft update guide | Pillars of Eternity II: Deadfire - Ultimate Edition | (MSRC status code 3) |
| Microsoft update guide | Pillars of Eternity: Definitive Edition | (MSRC status code 3) |
| Microsoft update guide | Pillars of Eternity: Hero Edition | (MSRC status code 3) |
| Microsoft update guide | Starfield Companion App | (MSRC status code 3) |
| Microsoft update guide | The Bard's Tale Trilogy | (MSRC status code 3) |
| Microsoft update guide | The Elder Scrolls IV: Oblivion Remastered Companion App | (MSRC status code 3) |
| Microsoft update guide | The Elder Scrolls: Blades | (MSRC status code 3) |
| Microsoft update guide | The Elder Scrolls: Castles | (MSRC status code 3) |
| Microsoft update guide | Warcraft Rumble | (MSRC status code 3) |
| Microsoft update guide | Wasteland 3 | (MSRC status code 3) |
| Microsoft update guide | Wasteland Remastered | (MSRC status code 3) |
| Microsoft update guide | DOOM (2019) | (MSRC status code 3) |
| Microsoft update guide | DOOM II (2019) | (MSRC status code 3) |
| Microsoft update guide | Forza Customs | (MSRC status code 3) |
| Microsoft update guide | Gears POP! | (MSRC status code 3) |
| Microsoft update guide | Halo Recruit | (MSRC status code 3) |
| Microsoft update guide | Mighty Doom | (MSRC status code 3) |
| Microsoft update guide | The Elder Scrolls: Legends | (MSRC status code 3) |
| Microsoft update guide | Zoo Tycoon Friends | (MSRC status code 3) |
| Microsoft update guide | Microsoft Mesh for Meta Quest | (MSRC status code 3) |
| Microsoft update guide | Grounded 2 Artbook | (MSRC status code 3) |
| Microsoft update guide | Hearthstone | (MSRC status code 3) |
| Microsoft update guide | Pillars of Eternity | (MSRC status code 3) |
| Microsoft update guide | Microsoft Mesh PC Applications | (MSRC status code 3) |
Vendor remediation references
- Release Notes · build 5.2514 · product IDs 20513
- Vendor guidance · product IDs 20513
- Release Notes · build 5.2514 · product IDs 20511
- Vendor guidance · product IDs 20511
Original records & references
- NIST NVD record
- CVE Program record
- msrc.microsoft.com — Vendor advisory
PUBLISHED 2025-10-03T03:00:00-04:00
MODIFIED 2025-10-07T03:00:00-04:00
INGESTED 2026-10-08T12:45:32-04:00