CVE-2017-14398

CVE-2017-14398 is a local privilege escalation vulnerability affecting Razer Synapse 2.20.15.1104, specifically within the rzpnk.sys driver. An attacker can exploit this by manipulating a handle to \Device\PhysicalMemory and using IOCTL 0x22A064 with ZwMapViewOfSection to achieve arbitrary memory read/write, leading to full system compromise. Rated 7.8 HIGH on CVSS, it requires local access but is low complexity with no user interaction needed, resulting in high confidentiality, integrity, and availability impacts. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability.