CVE-2025-9871
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-10-29

Last updated on: 2025-11-06

Assigner: Zero Day Initiative

Description
Razer Synapse 3 Chroma Connect Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Razer Chroma SDK installer. By creating a symbolic link, an attacker can abuse the installer to delete arbitrary files. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-26373.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-10-29
Last Modified
2025-11-06
Generated
2026-05-07
AI Q&A
2025-10-29
EPSS Evaluated
2026-05-05
NVD
CVE-2025-9871
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
razer synapse to 3.10.730.71519 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-59 The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability exists in the Razer Chroma SDK installer used by Razer Synapse 3. It allows a local attacker who can already run low-privileged code on the system to create a symbolic link that the installer abuses to delete arbitrary files. This can be leveraged to escalate privileges and execute arbitrary code with SYSTEM-level permissions.


How can this vulnerability impact me? :

If exploited, this vulnerability can allow an attacker to gain SYSTEM-level privileges on your machine, potentially leading to full control over the system, unauthorized access to sensitive data, and the ability to execute malicious code with the highest privileges.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart