UE
Product
Unreal Engine
10
CVEs
0
On KEV
7.7
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch
Add Unreal Engine to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-14765 | 7.7 | Oct 14 | Epic Games Unreal Engine Insecure Default URL Scheme Allowance in LaunchURL Affected: through 5.8.0 |
| CVE-2007-4442 | – | Aug 21 | Stack-based buffer overflow in the logging function in the Unreal engine, possibly 2003 and 2004, as used in the internal web server, allows remote attackers to cause a denial of… Affected: 2003; 2004 |
| CVE-2007-4443 | – | Aug 21 | The UCC dedicated server for the Unreal engine, possibly 2003 and 2004, on Windows allows remote attackers to cause a denial of service (continuous beep and server slowdown) via a… Affected: 2003; 2004 |
| CVE-2004-1805 | – | Dec 31 | Format string vulnerability in games using the Epic Games Unreal Engine 436 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via… Affected: 226f; 433; 436 |
| CVE-2004-1958 | – | Dec 31 | Directory traversal vulnerability in manifest.ini in Unreal engine allows remote attackers to overwrite arbitrary files via Affected: 433; 436 |
| CVE-2004-0608 | – | Dec 6 | The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earlier, Postal 2 1337 and… Affected: 226f; 433; 436 |
| CVE-2003-1430 | – | Dec 31 | Directory traversal vulnerability in Unreal Tournament Server 436 and earlier allows remote attackers to access known files via a ".." (dot dot) in an unreal:// URL Affected: 226f; 433; 436 |
| CVE-2003-1431 | – | Dec 31 | Buffer overflow in Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (crash) via a long host string in the Unreal URL Affected: 226f; 433; 436 |
| CVE-2003-1433 | – | Dec 31 | Epic Games Unreal Engine 226f through 436 does not validate the challenge key, which allows remote attackers to exhaust the player limit by joining the game multiple times Affected: 226f; 433; 436 |
| CVE-2003-1432 | – | Dec 31 | Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via (1) a packet with… Affected: 226f; 433; 436 |
Showing 10