Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday

Summary

Security researcher Chaotic Eclipse (aka Nightmare-Eclipse) has released a new proof-of-concept (PoC) exploit called LegacyHive. It has been described as a Windows User Profile Service arbitrary hive load elevation of privileges vulnerability. The Windows User Profile Service, also referred to as ProfSvc, is a core system component that manages user accounts and environments. "The PoC requires

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.