CVE-2017-11652

Severity: high (CVSS 8.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-08-18 · updated 2026-06-17
Weakness: CWE-732

Description

Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the CrashReporter directory, which allows local users to gain privileges via a Trojan horse dbghelp.dll file.

Affected products

Razer Synapse 3: through 2.20.15.1104

References

http://packetstormsecurity.com/files/143516/Razer-Synapse-2.20-DLL-Hijacking.html
http://packetstormsecurity.com/files/143516/Razer-Synapse-2.20-DLL-Hijacking.html

Get alerted when CVE-2017-11652 or the next vulnerability affects your stack