{"id":"CVE-2025-27811","aliases":["EUVD-2025-16873","GHSA-xxvc-6xwm-7prp"],"status":"published","title":"A local privilege escalation in the razer_elevation_service.exe in Razer Synapse 4 through 4.0.86...","description":"A local privilege escalation in the razer_elevation_service.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00139,"percentile":0.03318,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-269"],"published":"2025-06-04T00:00:00Z","modified":"2026-06-17T09:04:15Z","products":[{"vendor":"razer","product":"synapse_4"}],"references":[{"url":"https://app.inspectiv.com/#/submissions/EAEDG9ssRaTWKSJJ5Bbrt9","tags":["Permissions Required"]},{"url":"https://gist.github.com/leonjza/829a98f6c0954d7cb3f6614d05f87f37","tags":["Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27811"},{"url":"https://github.com/advisories/GHSA-xxvc-6xwm-7prp"}],"sources":{"cve":[{"id":"CVE-2025-27811","description":"A local privilege escalation in the razer_elevation_service.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service.","status":"published","published":"2025-06-04T00:00:00Z","modified":"2025-06-04T18:20:29.903Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:32:42.751171Z"}],"euvd":[{"id":"EUVD-2025-16873","description":"A local privilege escalation in the razer_elevation_service.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service.","status":"published","published":"2025-06-04T00:00:00Z","modified":"2025-06-04T18:20:29Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:32:29.680736Z"}],"ghsa":[{"id":"GHSA-xxvc-6xwm-7prp","title":"A local privilege escalation in the razer_elevation_service.exe in Razer Synapse 4 through 4.0.86...","description":"A local privilege escalation in the razer_elevation_service.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service.","status":"published","published":"2025-06-04T15:30:40Z","modified":"2025-06-04T21:32:18Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T15:02:34.475579Z"}],"nvd":[{"id":"CVE-2025-27811","description":"A local privilege escalation in the razer_elevation_service.exe in Razer Synapse 4 through 4.0.86.2502180127 allows a local attacker to escalate their privileges via a vulnerable COM interface in the target service.","status":"published","published":"2025-06-04T14:15:28.26Z","modified":"2026-06-17T09:04:15.833Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:11:10.8732Z"}]}}