CNNVD-202510-3943 Information

CNNVD ID

CNNVD-202510-3943

CVE-2025-9869

  • CNNVD Published: 2025-10-29

Description (Chinese)

Razer Synapse 3是美国雷蛇(Razer)公司的一个应用软件。基于云的统一硬件配置工具。 Razer Synapse 3存在后置链接漏洞,该漏洞源于Razer Synapse Service允许创建符号链接,可能导致本地权限提升和执行任意代码。

Description (English)

Razer Sympse 3 is an application of Razer Corporation. A unified cloud-based hardware configuration tool. Razer Sympse 3 has a backlink loophole, which stems from Razer Sympse Service allowing the creation of a symbol link, which may lead to local privileges being raised and any code being enforced.

Hazard Level

Medium

Vulnerability Type

后置链接

Affected Vendor

雷蛇

Published

2025-10-29

Last Modified

2026-02-24

References

https://www.zerodayinitiative.com/advisories/ZDI-25-919/

Patch

https://www.razer.com/

Share on: