CVE-2017-11653: Razer Synapse

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the Devices directory, which allows local users to gain privileges via a Trojan horse (1) RazerConfigNative.dll or (2) RazerConfigNativeLOC.dll file.

Affected products

• Razer Synapse: up to and including 2.20.15.1104

Published 2017-08-18. Last modified 2026-06-17.