What’s Vulnerable › Vulnerabilities

CVE-2025-27811

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-04 · updated 2026-06-17
• Weakness: CWE-269

Description

A local privilege escalation in the razer_elevation_service.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service.

Affected products

• Razer Synapse 4: through 4.0.86.2502180127

References

• https://app.inspectiv.com/#/submissions/EAEDG9ssRaTWKSJJ5Bbrt9
• https://gist.github.com/leonjza/829a98f6c0954d7cb3f6614d05f87f37

Get alerted when CVE-2025-27811 or the next vulnerability affects your stack