HiveNightmare Windows Zero-Day Vuln Allows Privilege Escalation

By   ISBuzz Team
Writer , Information Security Buzz | Jul 23, 2021 05:50 am PST

A new Microsoft “HiveNightmare” vuln has surfaced in the MS KB5004605 update that added AES encryption on OS versions from Windows 10 build 1809 and newer, as confirmed by Twitter user Jonas L and @GossiTheDog.  Microsoft says in CVE-2021-36934 that the zero-day can enable users to escalate to SYSTEM privileges on windows 10 & newer systems.  A Haystack Solutions expert offers thoughts.