Privilege escalation via writable subapplication database

Incorrect permissions in SteelSeries GG 36.0.0 allow local users to execute code with elevated privileges through the subapplication database. The application stores subapplication definitions in an unencrypted database at a location writable by nonprivileged users, allowing executable paths and launch settings to be altered. Exploitation requires local access and bypassing executable certificate validation through DLL hijacking or a time-of-check-to-time-of-use race; resulting code can run in an administrator context.