Razer CVE debriefs

CVE-2026-18606

A weakness in Razer RzUpdateService 1.10.14.0 allows for improper privilege management via manipulation of a named pipe handler argument. Local access is required for the attack. The exploit has been made public and could be used for attacks. The vendor was contacted early about this disclosure. This vulnerability has a high severity score and requires immediate attention from defenders responsible for sy [truncated]