Tracked topic
… Microsoft shared mitigation measures for YellowKey to defend against potential attacks that exploit it in the wild, while also complaining that the proof-of-concept had "been made public violating coordinated vulnerability best practices." On Tuesday, Microsoft fixed the GreenPlasma, MiniPlasma, an… …
Nightmare-Eclipse has released YellowKey, a fully BitLocker encrypted disk bypass for vulnerable Windows 11 and Server systems. …
… The first of the two exploits, YellowKey , is a bypass vulnerability affecting BitLocker only on Windows 11. …
… In addition to YellowKey, Nightmare-Eclipse has also disclosed GreenPlasma , a severe elevation of privilege vulnerability that allows attackers to gain full system-level control. …
Microsoft has released mitigation guidance for YellowKey, the publicly disclosed BitLocker bypass now tracked as CVE-2026-45585, after a working proof of concept was published without coordinated disclosure. …
… Microsoft shares YellowKey mitigations On Tuesday, Microsoft said it is now tracking the YellowKey flaw under CVE-2026-45585 and shared mitigation measures to defend against potential attacks exploiting it in the wild. …
… YellowKey exposed a glaring security hole in the Windows Recovery Environment WinRE that can be used to bypass BitLocker entirely, and both exploits remain unpatched. Microsoft, however, has found a way to somewhat mitigate YellowKey, but it may require some manual tweaking from BitLocker users. …
… Alongside YellowKey, Chaotic Eclipse also published information on a second vulnerability named GreenPlasma. …
… Denn zumindest in seiner aktuellen Form lässt sich der Yellowkey-Exploit nur auf Systemen im TPM-only-Modus ausnutzen. Auch Microsoft versichert, dass eine TPM+PIN-Konfiguration nicht für Yellowkey anfällig ist. …
… YellowKey also reportedly works in Windows Server 2022 and 2025, but not in Windows 10. …