Search/CVE-2026-45585
● CVE — Medium

CVE-2026-45585

VendormicrosoftProductwindows 11 24h2, windows 11 25h2, windows 11 26h1, windows server 2025DiscoveredMay 20, 2026UpdatedJul 24, 2026

Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey". The proof of concept for this vulnerability has been made public violating coordinated vulnerability best practices. We are issuing this CVE to provide mitigation guidance that can be implemented to protect against this vulnerability until the security update is made available. Mitigation FAQs Should I leverage the temporary mitigation? Microsoft recommends that you consider implementing these mitigations if you are concerned your devices and data are at risk of being compromised or stolen. For example, if your organization’s employees take their work devices home or on business travel. What impact to service availability/management could be caused by implementing the…

CVSS v3.1
6.8 MEDIUM
EPSS
1.89%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
61
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 26, 2026
▲ 0.54pp
1.35% → 1.89% over 3 tracked changes
CVSS v3.1 Detail
Attack VectorPHYSICAL
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Connections
71 relationships
Timeline
disclosure → media coverage
May 13, 2026
theregister.com reports: Mystery Microsoft bug leaker keeps the zero-days coming
May 13, 2026
bleepingcomputer.com reports: Windows BitLocker zero-day gives access to protected drives, PoC released
May 14, 2026
securityweek.com reports: Researcher Drops YellowKey, GreenPlasma Windows Zero-Days
May 14, 2026
thehackernews.com reports: Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation
May 14, 2026
securityweek.com reports: F5 Patches Over 50 Vulnerabilities
May 14, 2026
acn.gov.it reports: Microsoft: disponibili PoC per lo sfruttamento di vulnerabilità zero-day
May 15, 2026
securityweek.com reports: Cisco Patches Another SD-WAN Zero-Day, the Sixth Exploited in 2026
May 17, 2026
bleepingcomputer.com reports: New Windows 'MiniPlasma' zero-day exploit gives SYSTEM access, PoC released
May 18, 2026
thehackernews.com reports: MiniPlasma Windows 0-Day Enables SYSTEM Privilege Escalation on Fully Patched Systems
May 18, 2026
securityweek.com reports: Researcher Drops MiniPlasma Windows Exploit for Unpatched 2020 CVE
May 18, 2026
cybersecurity360.it reports: MiniPlasma: la patch del 2020 su Windows che non c’è mai stata o è sparita
May 18, 2026
schneier.com reports: Zero-Day Exploit Against Windows BitLocker
May 18, 2026
research.checkpoint.com reports: 18th May – Threat Intelligence Report
May 19, 2026
darkreading.com reports: Windows Zero-Day Barrage Continues After Patch Tuesday
May 20, 2026
Disclosure — published as a CVE record. · last revised by NVD Jul 24, 2026
May 20, 2026
bleepingcomputer.com reports: Microsoft shares mitigation for YellowKey Windows zero-day
May 20, 2026
thehackernews.com reports: Microsoft Releases Mitigation for YellowKey BitLocker Bypass CVE-2026-45585 Exploit
May 20, 2026
helpnetsecurity.com reports: Microsoft provides mitigation for “YellowKey” BitLocker bypass flaw (CVE-2026-45585)
May 20, 2026
securityweek.com reports: Microsoft Rolls Out Mitigations for ‘YellowKey’ BitLocker Bypass
May 21, 2026
bleepingcomputer.com reports: Microsoft warns of new Defender zero-days exploited in attacks
May 21, 2026
helpnetsecurity.com reports: Microsoft Defender vulnerabilities exploited in the wild (CVE-2026-41091, CVE-2026-45498)
May 21, 2026
securityweek.com reports: Cisco Patches Critical Vulnerability in Secure Workload
May 24, 2026
helpnetsecurity.com reports: Week in review: GitHub breached via poisoned VS Code extension, critical NGINX flaw exploited
May 25, 2026
thehackernews.com reports: ⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos
May 26, 2026
securityweek.com reports: Hackers Exploited KnowledgeDeliver Zero-Day for Web Shell Deployment
May 28, 2026
infosecurity-magazine.com reports: Microsoft Condemns "Uncoordinated" Zero Day Disclosures
May 28, 2026
thehackernews.com reports: Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal
May 28, 2026
theregister.com reports: Disgruntled 0-day hunter 'humiliated' by Microsoft pledges 'bone shattering drop' as Redmond calls cops
May 29, 2026
therecord.media reports: Microsoft calls zero-day releases ‘never justifiable’ as researcher threatens to drop more
Jun 1, 2026
cybersecitalia.it reports: Cybersicurezza, Microsoft minaccia azioni legali contro l’analista “Nightmare Eclipse”
Jun 1, 2026
bleepingcomputer.com reports: Critical Windows Netlogon RCE flaw now exploited in attacks
Jun 3, 2026
bleepingcomputer.com reports: VS Code zero-day lets hackers steal GitHub tokens in one click
Jun 3, 2026
securityweek.com reports: Microsoft Tries to Calm Legal Threat Fears After Zero-Day Disclosure Backlash
Jun 4, 2026
securityweek.com reports: VS Code Vulnerability Allows One-Click GitHub Token Theft
Jun 9, 2026
securityweek.com reports: Microsoft Patches 200 Vulnerabilities
Jun 9, 2026
krebsonsecurity.com reports: A Record-Breaking Patch Tuesday for June 2026
Jun 9, 2026
bleepingcomputer.com reports: Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges
Jun 10, 2026
thehackernews.com reports: Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs
Jun 10, 2026
bleepingcomputer.com reports: Microsoft patches YellowKey, GreenPlasma, MiniPlasma zero-days
Jun 10, 2026
helpnetsecurity.com reports: Record Microsoft Patch Tuesday, fresh zero-day
Jun 10, 2026
securityweek.com reports: New Windows Zero-Day Exploit ‘RoguePlanet’ Released
Jun 10, 2026
cybersecurity360.it reports: Aggiornamenti Microsoft giugno 2026: tre zero-day e il ritorno di Nightmare Eclipse
Jun 11, 2026
securityweek.com reports: ‘GreatXML’ Zero-Day Exploit Bypasses BitLocker
Jun 11, 2026
thehackernews.com reports: New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition XML Files
Jun 17, 2026
bleepingcomputer.com reports: Microsoft working on Defender patch for RoguePlanet zero-day
Jun 17, 2026
securityweek.com reports: Microsoft Working on Patch for ‘RoguePlanet’ Zero-Day
Jun 17, 2026
helpnetsecurity.com reports: Microsoft working on patch for RoguePlanet Defender zero-day (CVE-2026-50656)
Jun 30, 2026
bleepingcomputer.com reports: CISA: Windows BlueHammer flaw now exploited by ransomware gangs
Jul 9, 2026
bleepingcomputer.com reports: Microsoft patches RoguePlanet Defender zero-day vulnerability
Jul 9, 2026
helpnetsecurity.com reports: Microsoft releases fix for RoguePlanet Defender flaw (CVE-2026-50656)
Jul 14, 2026
thehackernews.com reports: Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack
Jul 16, 2026
securityweek.com reports: Nightmare Eclipse Drops ‘LegacyHive’ Windows Zero-Day
Jul 17, 2026
bleepingcomputer.com reports: New Windows LegacyHive zero-day gives hackers admin privileges
Jul 21, 2026
bleepingcomputer.com reports: Windows LegacyHive zero-day flaw gets free, unofficial patches
Aug 12, 2026
bleepingcomputer.com reports: New Microsoft Defender 'ShieldBreak' zero-day grants SYSTEM privileges
Aug 13, 2026
ncsc.gov.uk reports: How BitLocker PINs help protect your data and devices
Aug 13, 2026
bleepingcomputer.com reports: Microsoft patches LegacyHive Windows zero-day vulnerability
Aug 17, 2026
bleepingcomputer.com reports: Microsoft working on Defender patch for ShieldBreak zero-day
Aug 26, 2026
securelist.com reports: Exploits and vulnerabilities in Q2 2026
Sep 4, 2026
bleepingcomputer.com reports: New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges
Sep 9, 2026
bleepingcomputer.com reports: New Microsoft Defender 'ShieldCrash' zero-day grants SYSTEM access
Sep 22, 2026
bleepingcomputer.com reports: New Windows Defender zero-day blocks Microsoft antivirus updates