CVE-2025-9871: Razer Synapse 3 Chroma Connect Link Following Local Privilege Escalation Vulnerability
Razer Synapse 3 Chroma Connect Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the Razer Chroma SDK installer. By creating a symbolic link, an attacker can abuse the installer to delete arbitrary files. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-26373.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9871?
CVE-2025-9871 is classified as a local privilege escalation vulnerability, allowing attackers with low-privileged access to gain elevated permissions.
How do I fix CVE-2025-9871?
To mitigate CVE-2025-9871, users should update Razer Synapse 3 to the latest version provided by Razer.
Who is affected by CVE-2025-9871?
CVE-2025-9871 affects installations of Razer Synapse 3 software on local machines.
What can an attacker do with CVE-2025-9871?
An attacker exploiting CVE-2025-9871 can escalate their privileges, potentially allowing them to execute arbitrary code with higher permissions.
How can I identify if CVE-2025-9871 is present on my system?
To identify CVE-2025-9871, check for the installed version of Razer Synapse 3 and verify if it is vulnerable to local privilege escalation.