Razer Synapse 3 Local Privilege Escalation Vulnerability via Macro Module Link Following

A local privilege escalation vulnerability has been identified in Razer Synapse 3. This issue arises within the Razer Synapse Service, where an attacker can create a symbolic link to manipulate the service into deleting arbitrary files. By exploiting this vulnerability, an attacker with low privileges can escalate rights and execute code with SYSTEM privileges. To exploit this vulnerability, an attacker must first gain the ability to run low-privileged code on the target system.

Impact

Exploitation of this vulnerability allows for local privilege escalation, enabling an attacker to execute arbitrary code with SYSTEM privileges on the affected system.

Remediation

Users can update to Razer Synapse 3 version 3.10.730.71519 to address this vulnerability.