VulnSocial

CVE-2025-9870General(razer / synapse)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Razer Synapse 3 RazerPhilipsHueUninstall Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Philips HUE module installer. By creating a symbolic link, an attacker can abuse the installer to delete arbitrary files. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-26375.

razer CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-59

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • synapse

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • General: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
razer
Products
synapse

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-05-23: 1Technical Details · 2026-05-23: 105-23
Signal classification1 categories
General
1100.0%
Full discourse1 post
  • blanche 🫧@angelroom0
    General

    @troy0h1 Feel free to research those yourself, and next time don't make me do it for you CVE-2024-1460, CVE-2020-14979, CVE-2020-8808, CVE-2025-9870, CVE-2018-8061, CVE-2025-65264, CVE-2019-25360, CVE-2020-5990 None of these are false flags, all of these are LPEs or Kernel R/W :) https://t.co/EnrQU9rrGa

    Post summary

    The post lists several CVEs, confirming they are real local privilege escalation or kernel read/write bugs, but provides no PoCs, exploits, patches, or active exploitation details.

    100511.1K
    3.1K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Apprazersynapse---

Explore more

Back to dashboardrazer CVEssynapse vulnerabilities