Browse CVEs

HIGH 7.8 CVE-2025-9870 Razer Synapse 3 RazerPhilipsHueUninstall Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escala… Synapse 3.10.730.71519+ Fix from $1,9502025-10-29 HIGH 7.8 CVE-2025-9871 Razer Synapse 3 Chroma Connect Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privile… Synapse 3.10.730.71519+ Fix from $1,9502025-10-29 HIGH 7.8 CVE-2025-9869 Razer Synapse 3 Macro Module Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privilege… Synapse 3.10.730.71519+ Fix from $1,9502025-10-29 HIGH 7.8 CVE-2025-27811 A local privilege escalation in the razer_elevation_service.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate thei… Synapse 4 after 4.0.86.2502180127 Fix from $1,9502025-06-04 HIGH 7.8 CVE-2022-47631 Razer Synapse through 3.7.1209.121307 allows privilege escalation due to an unsafe installation path and improper privilege management. Attackers can… Synapse 3.8.0428.042117+ Fix from $1,9502023-09-14 HIGH 7.8 CVE-2023-3513 Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral <=7.11.0.558 on Windows allows a malicious actor with local access… Razer Central after 7.11.0.558 Fix from $1,9502023-07-14 HIGH 7.8 CVE-2023-3514 Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral <=7.11.0.558 on Windows allows a malicious actor with local access… Razer Central after 7.11.0.558 Fix from $1,9502023-07-14 HIGH 7.8 CVE-2022-45697 Arbitrary File Delete vulnerability in Razer Central before v7.8.0.381 when handling files in the Accounts directory. Razer Central 7.8.0.381+ Fix from $1,9502023-02-27 MEDIUM 6.8 CVE-2022-47632 Razer Synapse before 3.7.0830.081906 allows privilege escalation due to an unsafe installation path, improper privilege management, and improper cert… Synapse 3.7.0830.081906+ Fix from $1,6002023-01-27 CRITICAL 9.8 CVE-2022-29013EPSS 77% A command injection in the command parameter of Razer Sila Gaming Router v2.0.441_api-2.0.418 allows attackers to execute arbitrary commands via a cr… Sila Firmware No fix yet Fix from $2,3002022-06-09 HIGH 7.5 CVE-2022-29014EPSS 11% A local file inclusion vulnerability in Razer Sila Gaming Router v2.0.441_api-2.0.418 allows attackers to read arbitrary files. Sila Firmware No fix yet Fix from $1,9502022-06-09 HIGH 7.3 CVE-2021-44226 Razer Synapse before 3.7.0228.022817 allows privilege escalation because it relies on %PROGRAMDATA%\Razer\Synapse3\Service\bin even if %PROGRAMDATA%\… Synapse 3.7.0228.022817+ Fix from $1,9502022-03-23 MEDIUM 5.5 CVE-2021-30493 Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries within the ChromaBroadcast s… Synapse No fix yet Fix from $1,6002021-04-14 MEDIUM 5.5 CVE-2021-30494 Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries within the Razer Chroma SDK … Synapse No fix yet Fix from $1,6002021-04-14 HIGH 8.1 CVE-2020-16602EPSS 6% Razer Chroma SDK Rest Server through 3.12.17 allows remote attackers to execute arbitrary programs because there is a race condition in which a file … Chroma Sdk after 3.12.17 Fix from $1,9502020-09-02 MEDIUM 5.5 CVE-2019-13142 The RzSurroundVADStreamingService (RzSurroundVADStreamingService.exe) in Razer Surround 1.1.63.0 runs as the SYSTEM user using an executable located … Surround Mitigation only Fix from $1,6002019-07-09 HIGH 7.8 CVE-2017-14398 rzpnk.sys in Razer Synapse 2.20.15.1104 allows local users to read and write to arbitrary memory locations, and consequently gain privileges, via a m… Synapse Mitigation only Fix from $1,9502017-09-13 HIGH 8.4 CVE-2017-11652 Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the CrashReporter directory, which allows local users to gain privileges via a Troja… Synapse after 2.20.15.1104 Fix from $1,9502017-08-18 HIGH 7.8 CVE-2017-11653 Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the Devices directory, which allows local users to gain privileges via a Trojan hors… Synapse after 2.20.15.1104 Fix from $1,9502017-08-18 CRITICAL 9.8 CVE-2017-9769EPSS 86% A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOpenProcess allowing a handle to… Synapse No fix yet Fix from $2,3002017-08-02