Razer vulnerabilities
We track 9 vulnerabilities in Razer products across 6 products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on August 3, 2026.
Latest Razer vulnerabilities
- 7.8 High severity
RzUpdateService: Incorrect Privilege Assignment
A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown functionality of the file C:\Program Files (x86)\Razer\RzUpdateEngineService\RzUpdateService.exe of the component Named Pipe Handler. Executing a ma
- 7.8 High severity
Synapse 3: Improper Link Resolution Before File Access
Razer Synapse 3 Chroma Connect Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-priv
- 7.8 High severity
Synapse 3: Improper Link Resolution Before File Access
Razer Synapse 3 RazerPhilipsHueUninstall Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execut
- 7.8 High severity
Synapse 3: Improper Link Resolution Before File Access
Razer Synapse 3 Macro Module Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Razer Synapse 3. An attacker must first obtain the ability to execute low-privil
- 7.8 High severity
Synapse 4: Improper Privilege Management
A local privilege escalation in the razer_elevation_service.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service.
- 7.8 High severity
Synapse: Time-of-check Time-of-use (TOCTOU) Race Condition
Razer Synapse through 3.7.1209.121307 allows privilege escalation due to an unsafe installation path and improper privilege management. Attackers can place DLLs into %PROGRAMDATA%\Razer\Synapse3\Service\bin if they do so before the service is installed and if
- 7.8 High severity
Razer Central: Improper Privilege Management
Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral <=7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and calling "AddModule"
- 7.8 High severity
Razer Central: Improper Privilege Management
Improper Privilege Control in RazerCentralSerivce Named Pipe in Razer RazerCentral <=7.11.0.558 on Windows allows a malicious actor with local access to gain SYSTEM privilege via communicating with the named pipe as a low-privilege user and triggering an insec
- 9.8 Critical severity
Sila Firmware: Improper Neutralization of Special Elements used in an OS Command
A command injection in the command parameter of Razer Sila Gaming Router v2.0.441_api-2.0.418 allows attackers to execute arbitrary commands via a crafted POST request.