Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday

A security researcher known as Chaotic Eclipse has released a proof-of-concept exploit called LegacyHive, which targets a vulnerability in the Windows User Profile Service. This vulnerability allows for arbitrary hive load elevation of privileges. The Windows User Profile Service is a core system component responsible for managing user accounts and environments. The release of the LegacyHive exploit comes shortly after Microsoft's Patch Tuesday. The proof-of-concept exploit has specific requirements to function. The LegacyHive exploit takes advantage of a weakness in the ProfSvc component.