This security vulnerability can be exploited by a local Windows user who can attach a real or fake Razer USB device, for instance a gaming mouse, to the target system that is supported by Razer Synapse. Because of the high-privileged context in which the attacker-controlled code is executed, a local Windows user can exploit this security issue to obtain local administrative privileges as the Windows user account SYSTEM. a dynamic link library (DLL) file, with one that contains malicious code. In this specific attack scenario, an attacker is able to replace or add a program library, i.e. Oliver Schwarz found a security vulnerability in the Razer Synapse installer for Windows which can be exploited in a local privilege escalation attack.ĭue to the use of an insecure installation path and improper privilege management, the installation of the associated Razer system service is vulnerable to a so-called DLL hijacking attack. During a research project in fall 2021, SySS IT security expert Dr.

Synapse exploit