SecurityBleepingComputerabout 12 hours ago
New Windows LegacyHive zero-day gives hackers admin privileges
1 min read
A researcher using the handle Nightmare Eclipse released a Windows zero-day exploit called LegacyHive that abuses the User Profile Service to escalate privileges on fully patched systems. The proof-of-concept requires additional credentials and is limited to the usrclass.dat hive. Microsoft said it is actively investigating the vulnerability.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMicrosoft
Summary by ByteBrief
