If you have any questions, join us in the CVE Discussions forums and use the CVE Q&A Topic. 
This page allows you access the patch for your games and apps.
It will be updated as needed.
Patching Tool
Update: New builds are now available. See below for latest (and older) builds
â Patcher Version 1.3.3 [Latest version]
We have released an updated patch tool, version 1.3.3.
There is no change in how this version fixes your game projects. If you have successfully patched with an earlier version of the patch tool you do not need to do it again.
This update improves how the patching tool handles patching certain macOS app bundles:
- macOS: Fixed issues with files with reserved names in the app bundle
- macOS: All embedded code directories from nested bundles are properly added to the CodeResources
- macOS: Bundles without Info.plist can now be properly re-signed
- Updated language translations in the UI tool and documentation
To download the new 1.3.3 patching tool on Windows:
To download the new 1.3.3 patching tool on macOS:
https://security-patches.unity.com/bc0977e0-21a9-4f6e-9414-4f44b242110a/unity-patcher/UnityApplicationPatcher-1.3.3-macOS-Arm64.zip (for Apple Silicon Macs)
https://security-patches.unity.com/bc0977e0-21a9-4f6e-9414-4f44b242110a/unity-patcher/UnityApplicationPatcher-1.3.3-macOS-x64.zip (for Intel Macs)
To download the new 1.3.3 patching tool on Linux:
Patcher Version 1.3.2
We have released an updated patch tool, version 1.3.2.
There is no change in how this version fixes your game projects. If you have successfully patched with an earlier version of the patch tool you do not need to do it again.
This update improves how the patching tool handles patching certain macOS app bundles:
- macOS: It is now possible to skip app signing using either the âSkip Signingâ checkbox or the â-skipSigningâ command line flag.
- macOS: If an error occurs during signing the macOS app bundle, the signing process will be aborted, and a corresponding warning will be added to the log. The patching process will still succeed, but the app will need to be signed manually.
- macOS: Error messages are now provided if macOS signing fails instead of throwing exceptions.
- macOS: Missing executables in child bundles will prevent the macOS app from being signed.
- macOS: Non-Mach-O files in special folders (such as Frameworks, MacOS, PlugIns) are no longer silently deleted from the macOS app, instead they will prevent the app from being signed.
- macOS: Applications which contain null-terminated entitlements can now be successfully patched on macOS.
- Unnecessary components from the Android JDK have been removed from the downloads, saving disk space.
To download the new 1.3.2 patching tool on Windows:
To download the new 1.3.2 patching tool on macOS:
https://security-patches.unity.com/bc0977e0-21a9-4f6e-9414-4f44b242110a/unity-patcher/UnityApplicationPatcher-1.3.2macOS-Arm64.zip (for Apple Silicon Macs)
https://security-patches.unity.com/bc0977e0-21a9-4f6e-9414-4f44b242110a/unity-patcher/UnityApplicationPatcher-1.3.2macOS-x64.zip (for Intel Macs)
To download the new 1.3.2 patching tool on Linux:
Patcher Version 1.3.1
We have released an updated patch tool, version 1.3.1.
There is no change in how this version fixes your game projects. If you have successfully patched with an earlier version of the patch tool you do not need to do it again.
The patching tool is now available for us on Linux, this is convenient for running the patching tool as part of your projectâs build infrastructure.
Updates:
- Android: If the patching tool fails to clean up (remove temporary files or directories), but patching has been successful the tool will now log the successful patch.
- Android: The tool maintains the level of compression for files in the APK (if native libs are uncompressed in the original APK, they remain uncompressed in the patched APK)
- Android: Zipflinger is used to update files in an APK archive.
- Added notification to the user interface (and to the command line toolâs log) when a newer version of the patching tool is available.
- Fixed issue where macOS version of the command line tool would freeze when run on a headless macOS server
To download the new 1.3.1 patching tool on Windows:
To download the new 1.3.1 patching tool on macOS:
https://security-patches.unity.com/bc0977e0-21a9-4f6e-9414-4f44b242110a/unity-patcher/UnityApplicationPatcher-1.3.1-macOS-Arm64.zip (for Apple Silicon Macs)
https://security-patches.unity.com/bc0977e0-21a9-4f6e-9414-4f44b242110a/unity-patcher/UnityApplicationPatcher-1.3.1-macOS-x64.zip (for Intel Macs)
To download the new 1.3.1 patching tool on Linux:
Patcher Version 1.3.0
We have released an updated patch tool, version 1.3.0.
For macOS apps, if a previous version of the patching tool did not patch your app, please retry with this version - see notes below and the remediation guide
There is no change in how this version fixes your game projects. If you have successfully patched with an earlier version of the patch tool you do not need to do it again.
- Windows: Support patching of apps where the UnityPlayer.dll had been resigned with another certificate. The hashing algorithm, used to identify affected players on Windows, now ignores timestamps and the signature inside the binary.
- Android: Add -keystorePasswordFile, -keyAliasPasswordFile command line arguments. These are useful if you have special characters in the password, and itâs not easy to pass them via the shell
- macOS: The patcher will patch UnityPlayer.dylib for all macOS applications, regardless of the Hardened Runtime or entitlements.
- macOS: Applications that use the Hardened Runtime without the com.apple.security.cs.disable-library-validation entitlement will not be signed by the patcher after patching. When the patcher does not sign an application, it will display a warning that you must sign the application manually before testing or publishing.
- macOS: Allow signing of child bundles which donât have main executables. This makes it possible to properly sign application plugins.
To download the new 1.3.0 patching tool on Windows:
To download the new 1.3.0 patching tool on macOS:
https://security-patches.unity.com/bc0977e0-21a9-4f6e-9414-4f44b242110a/unity-patcher/UnityApplicationPatcher-1.3.0-macOS-Arm64.zip (for Apple Silicon Macs)
https://security-patches.unity.com/bc0977e0-21a9-4f6e-9414-4f44b242110a/unity-patcher/UnityApplicationPatcher-1.3.0-macOS-x64.zip (for Intel Macs)
Patcher Version 1.2.0
We have released an updated patch tool, version 1.2.0. There is no change in how this version fixes your game projects. If you have successfully patched with an earlier version of the patch tool you do not need to do it again with this tool. This update improves how the patching tool handles certain app bundles
- Android: Add -skipCleanup argument to the CLI tool when patching Android to skip deleting the intermediate files
- Android: Fix problem with patching AAB larger than 4GB (now uses signflinger).
- Android: Fix APK signing issues when the key alias contains spaces.
- Android: Fix APK signing issues when passwords have special characters, the patcher will save passwords to temporary files and pass them to the signer, and delete temporary files afterwards
- Android: When signing an APK, the patcher will extract min sdk version, and will pass it to the signer, to preserve this information
To download the new 1.2.0 patching tool on Windows:
https://security-patches.unity.com/bc0977e0-21a9-4f6e-9414-4f44b242110a/unity-patcher/UnityApplicationPatcher-1.2.0-Win.zip
To download the new 1.2.0 patching tool on macOS:
https://security-patches.unity.com/bc0977e0-21a9-4f6e-9414-4f44b242110a/unity-patcher/UnityApplicationPatcher-1.2.0-macOS-Arm64.zip (for Apple Silicon Macs)
https://security-patches.unity.com/bc0977e0-21a9-4f6e-9414-4f44b242110a/unity-patcher/UnityApplicationPatcher-1.2.0-macOS-x64.zip (for Intel Macs)
Patcher Version 1.1.1
We have released an updated patch tool, version 1.1.1. There is no change in how this version fixes your game projects. If you have successfully patched with an earlier version of the patch tool you do not need to do it again with this tool.
This update improves how the patching tool handles certain app bundles:
- Android: If 0 (zero) is specified as the version code, the tool will not modify the version code.
- Android: The tool no longer modifies the version name
- Android: The jar tool is used for rebuilding the application bundle, this corrects problems with corrupted manifest and resources files
- Android: zipalign is not used for AAB bundles
- Android: dex files are not recompiled
- macOS: Sign bundles containing non-fat 32-bit macOS binaries
To download the new 1.1.1 patching tool on Windows:
To download the new 1.1.1 patching tool on macOS:
https://security-patches.unity.com/bc0977e0-21a9-4f6e-9414-4f44b242110a/unity-patcher/UnityApplicationPatcher-1.1.1-macOS-Arm64.zip (for Apple Silicon Macs)
https://security-patches.unity.com/bc0977e0-21a9-4f6e-9414-4f44b242110a/unity-patcher/UnityApplicationPatcher-1.1.1-macOS-x64.zip (for Intel Macs)
Patcher Version 1.0.6
To download the patching tool on Windows:
https://security-patches.unity.com/bc0977e0-21a9-4f6e-9414-4f44b242110a/unity-patcher/UnityApplicationPatcher-1.0.6-Win.zip
To download the patching tool on macOS:
https://security-patches.unity.com/bc0977e0-21a9-4f6e-9414-4f44b242110a/unity-patcher/UnityApplicationPatcher-1.0.6-macOS-Arm64.zip (for Apple Silicon Macs)
https://security-patches.unity.com/bc0977e0-21a9-4f6e-9414-4f44b242110a/unity-patcher/UnityApplicationPatcher-1.0.6-macOS-x64.zip (for Intel Macs)
The following versions are already patched and no action is necessary.
Patched Unity Editor Versions
Patched Unity Editor Versions:
6000.3 LTS: 6000.3.0b4
6000.2: 6000.2.6f2
6000.1: 6000.1.17f1
6000.0 LTS: 6000.0.58f2
2023.2: 2023.2.22f1
2023.1: 2023.1.22f1
2022.3 xLTS: 2022.3.67f2
2022.3 LTS: 2022.3.62f3
2022.2: 2022.2.23f1
2022.1: 2022.1.25f1
2021.3 xLTS: 2021.3.56f2
2021.3 LTS: 2021.3.45f2
2021.2: 2021.2.20f1
2021.1: 2021.1.29f1
2020.3 LTS: 2020.3.49f1
2020.2: 2020.2.8f1
2020.1: 2020.1.18f1
2019.4 LTS: 2019.4.41f1
2019.3: 2019.3.17f1
2019.2: 2019.2.23f1
2019.1: 2019.1.15f1
You can find the full Remediation Guide Here