High Threat Security Alert (A26-05-23): Multiple Vulnerabilities in Microsoft Products

Description:

A researcher has published proof-of-concept (PoC) exploit codes for the critical vulnerabilities (known as "YellowKey" and "GreenPlasma") in Microsoft BitLocker and Windows CTF Monitor. These vulnerabilities could allow an attacker to bypass Microsoft BitLocker encryption to access data and gain SYSTEM privilege on systems.

Reports indicated that the proof-of-concept (PoC) exploit codes for the vulnerabilities (known as "YellowKey" and “GreenPlasma”) are publicly available and they are at high risk of exploitation. System administrators are advised to follow the recommendations provided by the vendors to mitigate the elevated risk of cyber attacks.

Affected Systems:

• Microsoft Windows 11
• Microsoft Windows Server 2022, 2025, 2026

Impact:

Successful exploitation of the vulnerabilities could lead to elevation of privilege or security restriction bypass or on an affected system.

Recommendation:

System administrators of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.

More Information:

• https://github.com/Nightmare-Eclipse/YellowKey
• https://github.com/Nightmare-Eclipse/GreenPlasma