| शीर्षक | RAZER RzUpdateService 1.10.14.0 Improper Access Controls |
|---|
| विवरण | A local privilege escalation vulnerability was identified in Razer RzUpdateService on Windows up to version 1.10.14.0. The issue is caused by insufficient access control and missing authentication for IPC commands received through a named pipe exposed by the privileged update service.
A low-privileged local attacker can connect to the affected named pipe and send crafted messages to trigger privileged service functionality. As RzUpdateService runs with elevated privileges, successful exploitation can lead to arbitrary code execution as NT AUTHORITY\SYSTEM.
The issue was reported to the vendor and was later fixed in the latest available version. |
|---|
| स्रोत | ⚠️ https://opcodic.notion.site/Privilege-Escalation-via-Insecure-Named-Pipe-in-RzUpdateService-2d88e7fec518803fa5decf10fb0e1e27 |
|---|
| उपयोगकर्ता | opcodic (UID 98850) |
|---|
| सबमिशन | 09/06/2026 12:53 AM (2 महीनों पहले) |
|---|
| संयम | 03/08/2026 09:11 AM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 385529 [Razer RzUpdateService 1.10.14.0 Named Pipe RzUpdateService.exe lpThreadParameter अधिकार वृद्धि] |
|---|
| अंक | 17 |
|---|