Windows LegacyHive zero-day flaw gets free, unofficial patches

A Windows zero-day vulnerability dubbed LegacyHive, discovered by researcher 'Nightmare Eclipse,' allows non-admin users to escalate privileges by modifying registry hives, enabling code execution upon admin login. The flaw affects Windows 10 2004 and later, as well as Windows Server 2019 and newer. While Microsoft has not yet assigned a CVE or released an official patch, unofficial micropatches are available from ACROS Security via the 0Patch platform. The vulnerability has not been observed in active exploitation, but proof-of-concept code has been published, increasing the risk of weaponization.

AI-extracted · verify before operational use