LegacyHive zero‑day lets attackers hijack admin accounts on patched Windows
Researcher Nightmare Eclipse released a PoC for LegacyHive, a local‑privilege escalation bug in the Windows User Profile Service that works on fully patched Windows 10/11 and Server systems. If exploited, a low‑privilege user can load admin hives and trigger code execution when the admin logs in, giving attackers full control.