Microsoft patches LegacyHive Windows zero-day vulnerability

Impact

Successful exploitation allows a local attacker with credentials for a non-administrator account to gain administrator privileges by loading another user's registry hive and executing code automatically upon admin login. This elevates the attacker's privileges on the system without requiring user interaction. The vulnerability affects the Windows User Profile Service and could lead to unauthorized access or modification of another user's data and system control.