legacyhive

LegacyHive is a newly public, unpatched local privilege-escalation flaw in the Windows User Profile Service, or ProfSvc, that can let a standard Windows user coerce a SYSTEM-level component into loading another user’s registry hive. The immediate concern is not a remote break-in: attackers first...