Researcher Publicly Discloses Windows BitLocker Zero-Day Bypass YellowKey and Simultaneously Reveals GreenPlasma Privilege-Escalation Vulnerability
In May 2026, multiple outlets reported on two Windows zero-days publicly disclosed by researchers: YellowKey, described as a BitLocker bypass flaw, and GreenPlasma, which is related to Windows privilege escalation. Three sources consistently confirmed these names and their connection to the Microsoft Windows ecosystem, but they differed or could not fully agree on GreenPlasma’s technical nature, the form of the disclosed exploit material, and whether it had already been used in attacks.