CVE-2021-30494

Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries within the Razer Chroma SDK subkey. These privileged operations consist of file name concatenation of a runtime log file that is used to store runtime log information. In other words, an attacker can create a file in an unintended directory (with some limitations).

• CWE-276

• https://versprite.com/advisories/razer-synapse-3-1/Third Party Advisory
• https://versprite.com/blog/security-research/razer-synapse-3-security-vulnerability-analysis-report/Exploit, Third Party Advisory
• https://versprite.com/security-resources/Third Party Advisory
• https://versprite.com/advisories/razer-synapse-3-1/Third Party Advisory
• https://versprite.com/blog/security-research/razer-synapse-3-security-vulnerability-analysis-report/Exploit, Third Party Advisory
• https://versprite.com/security-resources/Third Party Advisory

Published

Apr 14, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-30485An issue was discovered in libezxml.a in ezXML 0.8.6. The fu…6.5
• CVE-2021-30486SysAid 20.3.64 b14 is affected by Blind and Stacker SQL inje…8.8
• CVE-2021-30487In the topic moving API in Zulip Server 3.x before 3.4, orga…2.7
• CVE-2021-3049An improper authorization vulnerability in the Palo Alto Net…4.3
• CVE-2021-30490upsMonitor in ViewPower (aka ViewPowerHTML) 1.04-21012 throu…7.8
• CVE-2021-30493Multiple system services installed alongside the Razer Synap…5.5
• CVE-2021-30496The Telegram app 7.6.2 for iOS allows remote authenticated u…5.7
• CVE-2021-30497Ivanti Avalanche (Premise) 6.3.2 allows remote unauthenticat…7.5
• CVE-2021-30498A flaw was found in libcaca. A heap buffer overflow in expor…7.8
• CVE-2021-30499A flaw was found in libcaca. A buffer overflow of export.c i…7.8
• CVE-2021-3050An OS command injection vulnerability in the Palo Alto Netwo…8.8
• CVE-2021-30500Null pointer dereference was found in upx PackLinuxElf::canU…7.8