CVE-2019–13142: Razer Surround 1.1.63.0 EoP

**Razer Surround Elevation of Privilege via Insecure ProgramData Permissions** — Razer Surround installed a SYSTEM service (RzSurroundVADStreamingService) whose executable and containing folder under C:\ProgramData had overly permissive ACLs allowing non-privileged users to overwrite the binary; replacing the executable and rebooting allowed execution as SYSTEM. The report details discovery steps, proof-of-concept exploitation, and the coordinated disclosure and fix timeline.