Nightmare Eclipse Drops ‘LegacyHive’ Windows Zero-Day

A security researcher released a proof-of-concept exploit for LegacyHive, an unpatched Windows local privilege escalation vulnerability in the User Profile Service. The flaw allows attackers to load other users' registry hives without credentials. This is the seventh zero-day disclosure from this researcher targeting Microsoft products.