{"id":"CVE-2021-44226","state":"PUBLISHED","title":"Razer Synapse before 3.7.0228.022817 allows privilege escalation because it relies on %PROGRAMDATA%\\Razer\\Synapse3\\Service\\bin even if %PROGRAMDATA%\\Razer has been created by any u","description":"Razer Synapse before 3.7.0228.022817 allows privilege escalation because it relies on %PROGRAMDATA%\\Razer\\Synapse3\\Service\\bin even if %PROGRAMDATA%\\Razer has been created by any unprivileged user before Synapse is installed. The unprivileged user may have placed Trojan horse DLLs there.","publishedAt":"2022-03-23T00:00:00.000Z","updatedAt":"2024-08-04T04:17:24.676Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["https://www.razer.com/community","https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-058.txt","http://seclists.org/fulldisclosure/2022/Mar/51","http://packetstormsecurity.com/files/166485/Razer-Synapse-3.6.x-DLL-Hijacking.html","http://seclists.org/fulldisclosure/2023/Jan/26","http://packetstormsecurity.com/files/170772/Razer-Synapse-3.7.0731.072516-Local-Privilege-Escalation.html","http://seclists.org/fulldisclosure/2023/Sep/6","http://packetstormsecurity.com/files/174696/Razer-Synapse-Race-Condition-DLL-Hijacking.html"],"weaknesses":[],"ingestedAt":"2026-10-29T19:49:10.699Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/44xxx/CVE-2021-44226.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2021-44226","state":"PUBLISHED","datePublished":"2022-03-23T00:00:00.000Z","dateUpdated":"2024-08-04T04:17:24.676Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2021-11-26T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Razer Synapse before 3.7.0228.022817 allows privilege escalation because it relies on %PROGRAMDATA%\\Razer\\Synapse3\\Service\\bin even if %PROGRAMDATA%\\Razer has been created by any unprivileged user before Synapse is installed. The unprivileged user may have placed Trojan horse DLLs there."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"https://www.razer.com/community"},{"url":"https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-058.txt"},{"url":"http://seclists.org/fulldisclosure/2022/Mar/51","name":"20220325 [SYSS-2021-058] Razer Synapse - Local Privilege Escalation","tags":["mailing-list"]},{"url":"http://packetstormsecurity.com/files/166485/Razer-Synapse-3.6.x-DLL-Hijacking.html"},{"url":"http://seclists.org/fulldisclosure/2023/Jan/26","name":"20230126 [SYSS-2022-047] Razer Synapse - Local Privilege Escalation","tags":["mailing-list"]},{"url":"http://packetstormsecurity.com/files/170772/Razer-Synapse-3.7.0731.072516-Local-Privilege-Escalation.html"},{"url":"http://seclists.org/fulldisclosure/2023/Sep/6","name":"20230918 [SYSS-2023-002] Razer Synapse - Local Privilege Escalation","tags":["mailing-list"]},{"url":"http://packetstormsecurity.com/files/174696/Razer-Synapse-Race-Condition-DLL-Hijacking.html"}],"problemTypes":[{"descriptions":[{"type":"text","lang":"en","description":"n/a"}]}],"providerMetadata":{"shortName":"mitre","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateUpdated":"2023-09-18T15:06:25.332Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.razer.com/community","tags":["x_transferred"]},{"url":"https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-058.txt","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2022/Mar/51","name":"20220325 [SYSS-2021-058] Razer Synapse - Local Privilege Escalation","tags":["mailing-list","x_transferred"]},{"url":"http://packetstormsecurity.com/files/166485/Razer-Synapse-3.6.x-DLL-Hijacking.html","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2023/Jan/26","name":"20230126 [SYSS-2022-047] Razer Synapse - Local Privilege Escalation","tags":["mailing-list","x_transferred"]},{"url":"http://packetstormsecurity.com/files/170772/Razer-Synapse-3.7.0731.072516-Local-Privilege-Escalation.html","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2023/Sep/6","name":"20230918 [SYSS-2023-002] Razer Synapse - Local Privilege Escalation","tags":["mailing-list","x_transferred"]},{"url":"http://packetstormsecurity.com/files/174696/Razer-Synapse-Race-Condition-DLL-Hijacking.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T04:17:24.676Z"}}]}}}