Razer kayıtları
razer üreticisine ait 20 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %5
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-59 Improper Link Resolution Before File Access ('Link Following')4
- CWE-732 Incorrect Permission Assignment for Critical Resource3
- CWE-269 Improper Privilege Management3
- CWE-427 Uncontrolled Search Path Element2
- CWE-276 Incorrect Default Permissions2
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
20 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
65Bu hafta | CVE-2017-9769Silahlaştırılmış | A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOpenProcess allowing a razer · synapse | Kritik9,8 | — | %85,5 | 2 Ağu 2017 |
62Bu hafta | CVE-2022-29013Kavram kanıtı | A command injection in the command parameter of Razer Sila Gaming Router v2.0.441_api-2.0.418 allows attackers to execute arbitrary commandsrazer · sila firmware · CWE-78 | Kritik9,8 | — | %76,9 | 8 Haz 2022 |
34İzleyin | CVE-2022-29014Kavram kanıtı | A local file inclusion vulnerability in Razer Sila Gaming Router v2.0.441_api-2.0.418 allows attackers to read arbitrary files.razer · sila firmware | Yüksek7,5 | — | %11,8 | 8 Haz 2022 |
34İzleyin | CVE-2020-16602Kavram kanıtı | Razer Chroma SDK Rest Server through 3.12.17 allows remote attackers to execute arbitrary programs because there is a race condition in whicrazer · chroma sdk · CWE-362 | Yüksek8,1 | — | %6,0 | 2 Eyl 2020 |
33İzleyin | CVE-2017-11652İstismar yok | Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the CrashReporter directory, which allows local users to gain privileges virazer · synapse · CWE-732 | Yüksek8,4 | — | %0,4 | 18 Ağu 2017 |
31İzleyin | CVE-2022-47631İstismar yok | Razer Synapse through 3.7.1209.121307 allows privilege escalation due to an unsafe installation path and improper privilege management.razer · synapse · CWE-367 | Yüksek7,8 | — | %0,4 | 14 Eyl 2023 |
31İzleyin | CVE-2017-11653İstismar yok | Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the Devices directory, which allows local users to gain privileges via a Trrazer · synapse · CWE-732 | Yüksek7,8 | — | %0,4 | 18 Ağu 2017 |
31İzleyin | CVE-2023-3513İstismar yok | RazerCentralService Unsafe Deserialization Escalation of Privilegerazer · razer central · CWE-269 | Yüksek7,8 | — | %0,3 | 14 Tem 2023 |
31İzleyin | CVE-2017-14398İstismar yok | rzpnk.sys in Razer Synapse 2.20.15.1104 allows local users to read and write to arbitrary memory locations, and consequently gain privilegesrazer · synapse · CWE-119 | Yüksek7,8 | — | %0,3 | 13 Eyl 2017 |
31İzleyin | CVE-2022-45697İstismar yok | Arbitrary File Delete vulnerability in Razer Central before v7.8.0.381 when handling files in the Accounts directory.razer · razer central · CWE-59 | Yüksek7,8 | — | %0,3 | 27 Şub 2023 |
31İzleyin | CVE-2023-3514İstismar yok | RazerCentralSerivce Unsafe Named Pipe Permission Escalation of Privilege Vulnerabilityrazer · razer central · CWE-269 | Yüksek7,8 | — | %0,2 | 14 Tem 2023 |
31İzleyin | CVE-2025-9871İstismar yok | Razer Synapse 3 Chroma Connect Link Following Local Privilege Escalation Vulnerabilityrazer · synapse · CWE-59 | Yüksek7,8 | — | %0,2 | 29 Eki 2025 |
31İzleyin | CVE-2025-9869İstismar yok | Razer Synapse 3 Macro Module Link Following Local Privilege Escalation Vulnerabilityrazer · synapse · CWE-59 | Yüksek7,8 | — | %0,2 | 29 Eki 2025 |
31İzleyin | CVE-2025-9870İstismar yok | Razer Synapse 3 RazerPhilipsHueUninstall Link Following Local Privilege Escalation Vulnerabilityrazer · synapse · CWE-59 | Yüksek7,8 | — | %0,2 | 29 Eki 2025 |
31İzleyin | CVE-2025-27811İstismar yok | A local privilege escalation in the razer_elevation_service.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escarazer · synapse 4 · CWE-269 | Yüksek7,8 | — | %0,1 | 4 Haz 2025 |
29İzleyin | CVE-2021-44226İstismar yok | Razer Synapse before 3.7.0228.022817 allows privilege escalation because it relies on %PROGRAMDATA%\Razer\Synapse3\Service\bin even if %PROGrazer · synapse · CWE-427 | Yüksek7,3 | — | %0,9 | 23 Mar 2022 |
27İzleyin | CVE-2022-47632İstismar yok | Razer Synapse before 3.7.0830.081906 allows privilege escalation due to an unsafe installation path, improper privilege management, and imprrazer · synapse · CWE-427 | Orta6,8 | — | %0,6 | 27 Oca 2023 |
22İzleyin | CVE-2021-30493İstismar yok | Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries within the ChromaBrrazer · synapse · CWE-276 | Orta5,5 | — | %0,5 | 14 Nis 2021 |
22İzleyin | CVE-2021-30494İstismar yok | Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries within the Razer Chrazer · synapse · CWE-276 | Orta5,5 | — | %0,5 | 14 Nis 2021 |
22İzleyin | CVE-2019-13142İstismar yok | The RzSurroundVADStreamingService (RzSurroundVADStreamingService.exe) in Razer Surround 1.1.63.0 runs as the SYSTEM user using an executablerazer · surround · CWE-732 | Orta5,5 | — | %0,3 | 9 Tem 2019 |
- CVE-2017-976965Bu hafta
A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOpenProcess allowing a
KritikCVSS 9,8SilahlaştırılmışEPSS %86razer · synapse2 Ağu 2017
- CVE-2022-2901362Bu hafta
A command injection in the command parameter of Razer Sila Gaming Router v2.0.441_api-2.0.418 allows attackers to execute arbitrary commands
KritikCVSS 9,8Kavram kanıtıEPSS %77razer · sila firmware8 Haz 2022
- CVE-2022-2901434İzleyin
A local file inclusion vulnerability in Razer Sila Gaming Router v2.0.441_api-2.0.418 allows attackers to read arbitrary files.
YüksekCVSS 7,5Kavram kanıtıEPSS %12razer · sila firmware8 Haz 2022
- CVE-2020-1660234İzleyin
Razer Chroma SDK Rest Server through 3.12.17 allows remote attackers to execute arbitrary programs because there is a race condition in whic
YüksekCVSS 8,1Kavram kanıtıEPSS %6razer · chroma sdk2 Eyl 2020
- CVE-2017-1165233İzleyin
Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the CrashReporter directory, which allows local users to gain privileges vi
YüksekCVSS 8,4İstismar yokEPSS %0razer · synapse18 Ağu 2017
- CVE-2022-4763131İzleyin
Razer Synapse through 3.7.1209.121307 allows privilege escalation due to an unsafe installation path and improper privilege management.
YüksekCVSS 7,8İstismar yokEPSS %0razer · synapse14 Eyl 2023
- CVE-2017-1165331İzleyin
Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the Devices directory, which allows local users to gain privileges via a Tr
YüksekCVSS 7,8İstismar yokEPSS %0razer · synapse18 Ağu 2017
- CVE-2023-351331İzleyin
RazerCentralService Unsafe Deserialization Escalation of Privilege
YüksekCVSS 7,8İstismar yokEPSS %0razer · razer central14 Tem 2023
- CVE-2017-1439831İzleyin
rzpnk.sys in Razer Synapse 2.20.15.1104 allows local users to read and write to arbitrary memory locations, and consequently gain privileges
YüksekCVSS 7,8İstismar yokEPSS %0razer · synapse13 Eyl 2017
- CVE-2022-4569731İzleyin
Arbitrary File Delete vulnerability in Razer Central before v7.8.0.381 when handling files in the Accounts directory.
YüksekCVSS 7,8İstismar yokEPSS %0razer · razer central27 Şub 2023
- CVE-2023-351431İzleyin
RazerCentralSerivce Unsafe Named Pipe Permission Escalation of Privilege Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0razer · razer central14 Tem 2023
- CVE-2025-987131İzleyin
Razer Synapse 3 Chroma Connect Link Following Local Privilege Escalation Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0razer · synapse29 Eki 2025
- CVE-2025-986931İzleyin
Razer Synapse 3 Macro Module Link Following Local Privilege Escalation Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0razer · synapse29 Eki 2025
- CVE-2025-987031İzleyin
Razer Synapse 3 RazerPhilipsHueUninstall Link Following Local Privilege Escalation Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0razer · synapse29 Eki 2025
- CVE-2025-2781131İzleyin
A local privilege escalation in the razer_elevation_service.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to esca
YüksekCVSS 7,8İstismar yokEPSS %0razer · synapse 44 Haz 2025
- CVE-2021-4422629İzleyin
Razer Synapse before 3.7.0228.022817 allows privilege escalation because it relies on %PROGRAMDATA%\Razer\Synapse3\Service\bin even if %PROG
YüksekCVSS 7,3İstismar yokEPSS %1razer · synapse23 Mar 2022
- CVE-2022-4763227İzleyin
Razer Synapse before 3.7.0830.081906 allows privilege escalation due to an unsafe installation path, improper privilege management, and impr
OrtaCVSS 6,8İstismar yokEPSS %1razer · synapse27 Oca 2023
- CVE-2021-3049322İzleyin
Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries within the ChromaBr
OrtaCVSS 5,5İstismar yokEPSS %1razer · synapse14 Nis 2021
- CVE-2021-3049422İzleyin
Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries within the Razer Ch
OrtaCVSS 5,5İstismar yokEPSS %0razer · synapse14 Nis 2021
- CVE-2019-1314222İzleyin
The RzSurroundVADStreamingService (RzSurroundVADStreamingService.exe) in Razer Surround 1.1.63.0 runs as the SYSTEM user using an executable
OrtaCVSS 5,5İstismar yokEPSS %0razer · surround9 Tem 2019