vulnerability
Microsoft Releases Mitigation for YellowKey BitLocker Bypass CVE-2026-45585 Exploit
High
Summary
This report details a zero-day vulnerability, dubbed ‘YellowKey,’ affecting Windows 11 and Server 2025, allowing attackers to bypass BitLocker Device Encryption through a USB drive exploit. Microsoft has released a mitigation strategy involving WinRE modifications and recommending a shift to TPM+PIN authentication. The vulnerability, disclosed by Chaotic Eclipse, poses a significant risk due to its ability to grant unrestricted access to encrypted data with minimal physical access.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data