Local Privilege Escalation Vulnerability in Razer Synapse 3 by Razer

CVE-2025-9871

What is CVE-2025-9871?

A local privilege escalation vulnerability exists in Razer Synapse 3 due to improper handling of symbolic links within the Razer Chroma SDK installer. An attacker with the ability to execute low-privileged code on the target system can exploit this flaw to escalate privileges. By creating a specially crafted symbolic link, the attacker can manipulate the installer to delete arbitrary files, allowing for arbitrary code execution in the context of SYSTEM.

References