CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 6.6
CWE Name:  Permissions Privileges and Access Controls
Summary: the rzsurroundvadstreamingservice (rzsurroundvadstreamingservice.exe) in razer surround 1.1.63.0 runs as the system user using an executable located in %programdata%\razer\synapse\devices\razer surround\driver\. the dacl on this folder allows any user to overwrite contents of files in this folder, resulting in elevation of privilege.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): NONE/COMPLETE/COMPLETE
Published Date: 2019-07-09
Last Modified Date: 2019-07-15