Local Privilege Escalation Vulnerability in Razer Synapse 3 by Razer

CVE-2025-9869

What is CVE-2025-9869?

A vulnerability in Razer Synapse 3 allows local attackers to escalate their privileges by exploiting a flaw in the Razer Synapse Service. By creating a symbolic link, an attacker can manipulate the service to delete arbitrary files, potentially leading to the execution of arbitrary code with SYSTEM-level privileges. This can enable attackers to gain greater control over the affected system after initially executing low-privileged code.

References