Razer Synapse 4 Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in Razer Synapse 4, specifically in the component 'razer_elevation_service.exe', version 4.0.86.2502180127. This vulnerability allows local attackers with limited privileges to escalate their rights by exploiting a flawed COM interface in the service. The issue arises from improper handling of inter-process communication, enabling the execution of arbitrary code with SYSTEM-level privileges.

Impact

Exploitation of this vulnerability allows for local privilege escalation, enabling attackers to execute code with elevated SYSTEM privileges.

Remediation

Users can update to Razer Synapse 4 version 4.0.86.2502180127 to address this vulnerability. The issue has been fixed in component version 1.1.0.6.