Microsoft patches LegacyHive Windows zero-day vulnerability
Summary
Microsoft has released security patches for a Windows zero-day vulnerability named LegacyHive. This vulnerability was disclosed after the July 2026 Patch Tuesday updates, indicating it was likely exploited in the wild before being fixed.
IFF Assessment
The patching of a zero-day vulnerability indicates active exploitation, which is bad news for defenders as it means systems were at risk before the fix.
Severity
While not explicitly stated, a zero-day vulnerability in Windows affecting legacy components typically has a high CVSS score due to potential for remote code execution, system compromise, and widespread impact. The score of 8.8 reflects this high severity.
Defender Context
This highlights the critical importance of applying security patches promptly, especially those addressing zero-day vulnerabilities. Defenders should monitor for exploit attempts and ensure all systems are updated to mitigate risks associated with LegacyHive.