Microsoft is investigating the LegacyHive Windows zero-day, which could let standard users gain elevated access.