BaseFortify

Publication date: 2025-10-29

Last updated on: 2025-11-04

Assigner: Zero Day Initiative

Description

Razer Synapse 3 Macro Module Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Razer Synapse Service. By creating a symbolic link, an attacker can abuse the service to delete arbitrary files. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-26374.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-29

Last Modified

2025-11-04

Generated

2026-07-06

AI Q&A

2025-10-29

EPSS Evaluated

2026-07-05

NVD

CVE-2025-9869

Affected Vendors & Products

Vendor	Product	Version / Range
razer	synapse	to 3.10.730.71519 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-59	The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Razer Synapse 3 Macro Module, specifically within the Razer Synapse Service. It allows a local attacker who already has the ability to execute low-privileged code on the system to escalate their privileges. The attacker can create a symbolic link to abuse the service, enabling them to delete arbitrary files and ultimately execute arbitrary code with SYSTEM-level privileges.

Impact Analysis

If exploited, this vulnerability can allow an attacker with limited access to gain full SYSTEM privileges on the affected machine. This means the attacker could execute any code with the highest level of permissions, potentially leading to complete control over the system, unauthorized data access, modification, or deletion, and disruption of system operations.

Hi! I’m here to help you understand CVE-2025-9869. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70