According to other researchers, a bug like this in “plug and play” software is not uncommon. Issues like these are why it is important not to leave an unlocked device in public for anyone to access. The access gained with this mouse could lead to an attacker installing malware on a device that could be used for several things, including ransomware and spyware. It is good practice for anyone, including members of an organization at an executive level to never leave their computer unattended unless it is locked and secured. This is especially true when traveling to foreign countries or places. It is also important for organizations to carefully consider which employee groups should be allowed to install software to support devices, and monitor for unusual actions from employee user accounts. Utilizing a monitoring service to detect malicious activities on devices will help identify and mitigate attacks quickly. Binary Defense’s Managed Detection and Response (MDR) in conjunction with the 24/7 Security Operations Task Force is a great asset to have.

https://www.bleepingcomputer.com/news/security/razer-bug-lets-you-become-a-windows-10-admin-by-plugging-in-a-mouse/