CVE-2025-9869
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
A Link Following Local Privilege Escalation vulnerability in the Macro Module of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system. The flaw exists within the Razer Synapse Service; by creating a symbolic link, an attacker can abuse the service to delete arbitrary files.
Risk Assessment
A low-privileged attacker can escalate privileges and execute arbitrary code as SYSTEM, leading to full system compromise.
Recommendation
Update Razer Synapse 3 to a patched version and restrict the ability of local users to run untrusted code.
Other vulnerabilities in Razer Synapse 3
See all- CVE-2017-11653High
Razer Synapse version 2.20.15.1104 and earlier uses weak permissions for the Devices directory, allowing local users to gain privileges via a Trojan horse in the RazerConfigNative.dll or RazerConfigNativeLOC.dll files.
- CVE-2017-11652High
Razer Synapse version 2.20.15.1104 and earlier uses weak permissions for the CrashReporter directory, allowing local users to gain privileges via a malicious dbghelp.dll file.
- CVE-2017-9769Critical
In Razer Synapse 2.20.15.1104, there is a vulnerability that allows a specially crafted IOCTL to be sent to the rzpnk.sys driver. This can lead to opening a handle to an arbitrary process.
- CVE-2025-9871High
A Link Following Local Privilege Escalation vulnerability in Razer Synapse 3 Chroma Connect. An attacker must first obtain the ability to execute low-privileged code on the target system. The flaw exists within the Razer Chroma SDK installer; by creating a symbolic link, an attacker can abuse the installer to delete arbitrary files.
- CVE-2025-9870High
A Link Following Local Privilege Escalation vulnerability in the RazerPhilipsHueUninstall module of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system. The flaw exists within the Philips HUE module installer; by creating a symbolic link, an attacker can abuse the installer to delete arbitrary files.
Original NVD description (English source)
Razer Synapse 3 Macro Module Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Razer Synapse Service. By creating a symbolic link, an attacker can abuse the service to delete arbitrary files. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-26374.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS