CVE-2019-9197

Unity Editor 2018.3 is affected by CVE-2019-9197 via the com.unity3d.kharma protocol handler. A crafted com.unity3d.kharma URI can trigger remote code execution, with the attacker able to run code in the context of the current user. Exploitation requires user interaction (the target must visit a ...