Unity has fixes ready to go, and Valve has released an updated version of Steam, too.
A vulnerable Unity Runtime code could allow attackers to to execute commands and steal confidential information from devices running the app.