Microsoft Releases Mitigation for YellowKey BitLocker Bypass CVE-2026-45585 Exploit
YellowKey, a BitLocker bypass issue that was made public last week, was mitigated by Microsoft on Tuesday.
The zero-day vulnerability has a CVSS score of 6.8 and is being tracked as CVE-2026-45585. It has been referred to as a workaround for the BitLocker security mechanism.
The tech giant stated in an alert that it is aware of a security feature bypass vulnerability in Windows known as "YellowKey." This vulnerability's proof of concept has been made public, which is against coordinated vulnerability best practices.
The problem affects Windows Server 2025, Windows Server 2025 (Server Core installation), Windows 11 version 26H1 for x64-based systems, Windows 11 version 24H2 for x64-based systems, and Windows 11 version 25H2 for x64-based systems.
Chaotic Eclipse, sometimes know...