Windows 0-day drops the same day Microsoft releases record number of patches2 months agoWindows SecurityPrivilege EscalationZero-day Exploithttps://arstechnica.com/security/2026/07/windows-0-day-drops-the-same-day-microsoft-releases-record-number-of-patches/Copy Link一名研究人员发布漏洞利用代码，使低权限Windows账户能够修改管理员账户。该漏洞HiveLegacy针对Windows用户配置文件服务漏洞，允许未经授权的注册表更改。该漏洞需要知晓另一用户的凭据以及同一计算机上第三个账户的用户名。