CVE-2021-44226: High severity razer synapse 3 vulnerability
Razer Synapse before 3.7.0228.022817 allows privilege escalation because it relies on %PROGRAMDATA%\Razer\Synapse3\Service\bin even if %PROGRAMDATA%\Razer has been created by any unprivileged user before Synapse is installed. The unprivileged user may have placed Trojan horse DLLs there.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-44226?
CVE-2021-44226 is a vulnerability in Razer Synapse before version 3.7.0228.022817 that allows privilege escalation.
What is the severity of CVE-2021-44226?
The severity of CVE-2021-44226 is high with a CVSS score of 7.3.
How does CVE-2021-44226 allow privilege escalation?
CVE-2021-44226 allows privilege escalation because Razer Synapse relies on a specific location on the system where unprivileged users can place Trojan horse DLLs.
Which versions of Razer Synapse are affected by CVE-2021-44226?
Razer Synapse versions up to and excluding 3.7.0228.022817 are affected by CVE-2021-44226.
Is Microsoft Windows vulnerable to CVE-2021-44226?
No, Microsoft Windows is not vulnerable to CVE-2021-44226.