logo

Windows LegacyHive zero-day flaw gets free, unofficial patches

ID: b6c667ad-9b25-59b1-b712-b1f2a73585d3

STIX ID: report--b6c667ad-9b25-59b1-b712-b1f2a73585d3

Feed Name: Bleeping Computer

Threat Score
65/100

Date Published: 2026-07-21

Date Updated: 2026-07-21

Author: Sergiu Gatlan

...
...

The article describes a recently disclosed Windows zero‑day named LegacyHive affecting modern Windows releases where a non‑admin user can mount/modify another user's registry hive to gain automatic code execution when an administrator logs in; a public PoC and independent confirmations exist, ACROS Security has published unofficial 0Patch micropatches as a mitigation, and Microsoft is investigating the reports but has not yet released an official CVE or patch.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.