TI-2021-10891 Aliases CVE-2021-30494 GHSA-q5rm-2gp3-pgc5

Multiple system services installed alongside the Razer Synapse 3 software suite perform…

LOW 25CWE-276Published 2021-04-14 · Updated 2024-08-03

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · None · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries within the Razer Chroma SDK subkey. These privileged operations consist of file name concatenation of a runtime log file that is used to store runtime log information. In other words, an attacker can create a file in an unintended directory (with some limitations).

Why it matters now

EPSS 0.00495 42nd percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:razer:synapse:3.5.1030.101917:::::::*	3.5.1030.101917	Vulnerable	Razer

cpe:2.3:a:razer:synapse:3.5.1030.101917:*:*:*:*:*:*:* Versions 3.5.1030.101917 Vulnerable ·Razer

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2021-30494
2026-10-03 Alias added: GHSA-q5rm-2gp3-pgc5

References

Exploit 1

https://versprite.com/blog/security-research/razer-synapse-3-security-vulnerability-analysis-report/

Advisory 2

TI-2017-07151 A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse… CVSS 3.1CRITICAL 9.8
TI-2022-23660 Razer Synapse before 3.7.0830.081906 allows privilege escalation due to an unsafe… CVSS 3.1MEDIUM 6.8
TI-2017-08627 Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the CrashReporter… CVSS 3.1HIGH 8.4
TI-2025-09056 Link following in Razer Synapse 3 CVSS 3.0HIGH 7.8
TI-2025-09055 Link following in Razer Synapse 3 CVSS 3.0HIGH 7.8
TI-2025-09054 Link following in Razer Synapse 3 CVSS 3.0HIGH 7.8

See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences