Local Privilege Escalation in Razer Synapse Software by Razer
CVE-2025-27811

7.8HIGH

Key Information:

Vendor

Razer

Status
Razer Synapse
Vendor
CVE Published:
4 June 2025

What is CVE-2025-27811?

A local privilege escalation vulnerability exists in the Razer Synapse 4 software, specifically within the razer_elevation_service.exe component. Attackers with local access can exploit this vulnerability through a compromised COM interface, allowing them to elevate their privileges on the system. This could potentially give malicious users the ability to execute unauthorized actions and gain greater control over the affected systems.

References

https://app.inspectiv.com/#/submissions/EAEDG9ssRaTWKSJJ5...
https://gist.github.com/leonjza/829a98f6c0954d7cb3f6614d0...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.