Security researcher Nightmare-Eclipse publicly disclosed LegacyHive, an unpatched Local Privilege Escalation vulnerability in the Windows User Profile component. The flaw allows attackers to load other users' registry hives without requiring user credentials, potentially exposing application data and Windows Explorer history. The vulnerability affects all Windows desktop and server versions, including those updated with July 2026 Patch Tuesday, and remains unacknowledged and unpatched by Microsoft.
Registry Hive
1 post
LegacyHive: Nightmare-Eclipse’s Latest Zero-Day Drop with a Stripped PoC