Windows LegacyHive Zero-Day: ProfSvc Hive Bypass

A public proof-of-concept called LegacyHive exploits the User Profile Service in Windows; it can trick Windows into mounting another user's UsrClass.dat hive inside the attacker's registry namespace,