A reported Windows proof-of-concept shows how ordinary profile and registry-hive mechanics can become a security boundary problem without relying on memory corruption.
LegacyHive is a reminder that not every dangerous technique depends on a classic bug; sometimes the risk lives in how Windows loads, binds, and reuses profile state.
A newly disclosed Windows local privilege-escalation issue called LegacyHive centers on profile loading and the per-user Classes hive, a boundary that can matter long after a user signs off.