3 ms·

I don't understand the threat model of this for most Unity games on PC, it doesn't seem like there's anything you could do by running arbitrary code inside the

by wilg 1y ago

I don't understand the threat model of this for most Unity games on PC, it doesn't seem like there's anything you could do by running arbitrary code inside the Unity player that you couldn't already run on your PC directly or access via the process's memory, etc?

gs17 1y ago
On desktop it's considered more of a privilege escalation (you could get your code run with the privileges of the Unity program) than a code execution vulnerability.