CVE-2022-47631
CVSS 3.1 Score 7.8 of 10 (high)
Details
Summary
CVE-2022-47631, also known as Razer Synapse privilege escalation vulnerability, affects Razer Synapse versions up to 3.7.1209.121307. Attackers can exploit an unsafe installation path and improper privilege management to gain administrative privileges on Windows. By placing DLLs into the designated directory before the service is installed and denying write access for the SYSTEM user, attackers can replace a valid DLL with a malicious one after the service has already checked the file, exploiting a race condition. This vulnerability poses a high risk to organizations as it allows local Windows users to elevate their privileges and potentially gain unauthorized access to sensitive information or perform malicious actions on affected systems.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions