Chaotic Eclipse Unveils LegacyHive Exploit Affecting Fully Patched Windows Systems

Security researcher "Chaotic Eclipse" published LegacyHive, a proof-of-concept local privilege-escalation vulnerability targeting the Windows User Profile Service that can mount another user's registry hive (potentially an administrator's) into the current user's profile. The PoC requires local access and additional valid credentials, has no CVE or patch at publication, and is primarily relevant to post-compromise operations; the disclosure continues a public dispute between the researcher and Microsoft over coordinated vulnerability handling.