Vulnerabilities (CVE)

Filtered by vendor Razer Subscribe
Filtered by product Surround
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-13142 1 Razer 1 Surround 2023-12-10 6.6 MEDIUM 5.5 MEDIUM
The RzSurroundVADStreamingService (RzSurroundVADStreamingService.exe) in Razer Surround 1.1.63.0 runs as the SYSTEM user using an executable located in %PROGRAMDATA%\Razer\Synapse\Devices\Razer Surround\Driver\. The DACL on this folder allows any user to overwrite contents of files in this folder, resulting in Elevation of Privilege.