CVE-2021-30493: Razer Synapse

Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries within the ChromaBroadcast subkey. These privileged operations consist of file name concatenation of a runtime log file that is used to store runtime log information. In other words, an attacker can create a file in an unintended directory (with some limitations).

Affected products

  • Razer Synapse: version 3.5.1030.101917 only

Published 2021-04-14. Last modified 2026-06-17.