Windows Zero-Day: Admin Accounts Now Vulnerable!

A significant security vulnerability, dubbed HiveLegacy, has emerged, threatening Windows administrator accounts. This zero-day exploit, published recently, permits users with limited system rights to compromise administrator accounts by manipulating their registry hives. The exploit leverages a flaw in the Windows User Profile Service, enabling attackers to alter critical settings associated with an administrator's profile.

This powerful exploit requires an attacker to know credentials for at least one other user account on the machine and the username of a third account. Analysts suggest it could be chained with other exploits for more extensive system compromise. Microsoft is reportedly scrambling to develop a patch for this vulnerability, which was released by a researcher who has previously published multiple exploits due to dissatisfaction with Microsoft's handling of bug reports.