Approved changes feed: RSS · Atom

cpe:2.3:a:razer:rzupdateservice:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRazer (cc125114-d031-5078-a1b1-5bcb31c6ca9b)
ProductRzupdateservice (0aab74df-75b2-5777-a39b-89acf1771fc0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-18606 vulnerable 2026-09-16 04:34:02.215254 Razer RzUpdateService Named Pipe RzUpdateService.exe privileges management
HIGH (7.8)
A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown functionality of the file C:\Program Files (x86)\Razer\RzUpdateEngineService\RzUpdateService.exe of the component Named Pipe Handler. Executing a manipulation of the argument lpThreadParameter can lead to improper privilege management. The attack requires local access. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.
Published: 2026-08-03T16:15:07.966Z
Updated: 2026-08-03T16:56:43.523Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.