CVE-2019-13142

The RzSurroundVADStreamingService RzSurroundVADStreamingService.exe in Razer Surround 1.1.63.0 runs as the SYSTEM user using an executable located in %PROGRAMDATA%\Razer\Synapse\Devices\Razer Surround\Driver. The DACL on this folder allows any user to overwrite contents of files in this folder,...

CVE-2019-13142

The CVE-2019-13142 issue affects Razer Surround 1.1.63.0, specifically the RzSurroundVADStreamingService.exe component. The service runs as SYSTEM and uses an executable located in %PROGRAMDATA%\Razer\Synapse\Devices\Razer Surround\Driver; the DACL on this folder allows any user to overwrite file...