VulnerabilityBleeping Computer
7.8 — HIGH
Microsoft patches LegacyHive Windows zero-day vulnerability
Microsoft has released security patches to address a Windows zero-day vulnerability known as "LegacyHive," disclosed after the July 2026 Patch Tuesday. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
A Windows zero-day vulnerability known as 'LegacyHive' was disclosed by a security researcher, Nightmare Eclipse, after the July 2026 Patch Tuesday, allowing non-admin users to gain automatic code execution when an admin account logs in to a compromised system.
⚙️Technical Details
💥Impact Assessment
Severity: high
🛡️Recommended Actions
1Apply the official patches released by Microsoft (CVE-2026-62832) as soon as possible
2Enable Microsoft Defender for Endpoint (MDE) detection queries to detect potential LegacyHive exploits
3Implement additional security measures, such as using strong passwords and keeping software up-to-date
📦Affected Products
Microsoft Windows 10 21H2Microsoft Windows 10 22H2Microsoft Windows 11 23H2Microsoft Windows 11 24H2Microsoft Windows 11 25H2Microsoft Windows 11 26H1Microsoft Windows Server 2022Microsoft Windows Server 2025
🔐NVD Verified DataVERIFIED
CVE-2026-62832 ↗CVSS 7.8 — HIGH
Attack Vector
LOCAL
Complexity
LOW
Vector String
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-59
Affected Products (CPE)
Microsoft Windows 10 21H2Microsoft Windows 10 22H2Microsoft Windows 11 23H2Microsoft Windows 11 24H2Microsoft Windows 11 25H2
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.