Local Privilege Escalation Flaw in Razer Synapse 3 by Razer

CVE-2025-9870

What is CVE-2025-9870?

The vulnerability resides in the Philips HUE module installer of Razer Synapse 3, allowing local attackers to escalate their privileges. By creating a symbolic link, the attacker can manipulate the installer to delete arbitrary files, which can facilitate the execution of code with SYSTEM-level privileges. To exploit this flaw, the attacker must first execute low-privileged code on the target system, making it a critical component in the attack vector outlined in ZDI-CAN-26375.

References