49 matches found
WinRE-Patch
WinRE-Patch Parchea CVE-2022-41099 Original: https://github.com/halsey51013/UpdateWindowsRE-CVE-2022-41099...
CVE-2026-45585
🔑 CVE-2026-45585 - YellowKey 🔓 针对 CVE-2026-45585 YellowKey 的高级缓解措施 📌 什么是 YellowKey 漏洞？ YellowKey （CVE-2026-45585）是一个于 2026 年 5 月发现的零日物理攻击 漏洞，允许拥有物理访问权限 的攻击者完全绕过 Windows 11 设备上的 BitLocker 加密 — 无需 PIN、密码或恢复密钥。 攻击原理： 攻击者将设备启动到 WinRE （Windows 恢复环境） 使用特制的、包含 NTFS 事务日志（FsTx）的 USB 设备 利用 autofstx.exe...
Microsoft WinRE allows for bypass of UEFI/BIOS password enforcement
Overview Microsoft Windows Recovery Environment WinRE provides a mechanism for recovering and repairing Windows systems using an alternate boot environment. Under certain platform implementations, access to WinRE may allow an attacker to bypass firmware security controls, including...
GreatXML-PoC
GreatXML Reverse-Shell POC A self-contained Python proof-of-c...
Windows 11 Hardening Auditor for WinRE and BitLocker
This Python-based Windows security utility performs defensive auditing and mitigation tasks focused on Windows Recovery Environment WinRE and CVE-2026-45585, BitLocker protection policies, Secure Boot, TPM configuration, and boot-time execution integrity on Windows 11 systems...
YellowKey Bitlocker Bypass Mitigation
YellowKey is a zero-day physical attack vulnerability discovered in May 2026 that allows attackers with physical access to completely bypass BitLocker encryption on Windows 11 devices. This is a mitigation that modifies the Windows Recovery Environment to remove or disable the vulnerable...
Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation
An anonymous cybersecurity researcher who disclosed three Microsoft Defender vulnerabilities has returned with two more zero-days involving a BitLocker bypass and a privilege escalation impacting Windows Collaborative Translation Framework CTFMON. The security defects have been codenamed YellowKe...
CVE-2026-20928
Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security feature with a physical attack...
EUVD-2026-22352
Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security feature with a physical attack...
CVE-2026-20928
Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security feature with a physical attack...
CVE-2026-20928
CVE-2026-20928 affects Windows Recovery Environment Agent. Root cause: improper removal of sensitive information before storage/transfer. Impact: allows bypass of a security feature with physical access; confidentiality is impacted. Affected product: Windows Recovery Environment Agent component. ...
CVE-2026-20928 Windows Recovery Environment Security Feature Bypass Vulnerability
...
CVE-2026-20928 Windows Recovery Environment Security Feature Bypass Vulnerability
...
Windows Recovery Environment Security Feature Bypass Vulnerability
Improper removal of sensitive information before storage or transfer in Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security feature with a physical attack...
Microsoft Windows 安全漏洞
Microsoft Windows is an operating system used on personal devices by the American company Microsoft. The Microsoft Windows Recovery Environment Agent has a security vulnerability. Attackers can exploit this vulnerability to bypass certain features. The following products and versions are affected...
PT-2026-32718
Name of the Vulnerable Software and Affected Versions Windows Recovery Environment Agent affected versions not specified Description Improper removal of sensitive information before storage or transfer in the Windows Recovery Environment Agent allows an unauthorized attacker to bypass a security...
Windows update breaks USB support in recovery mode
We usually tell our faithful readers to install updates as soon as possible, but this time there’s an exception. Microsoft’s October security update has disabled USB mice and keyboards in the Windows Recovery Environment WinRE. WinRE is a special mode built into Windows that helps you fix problem...
EUVD-2021-13236
Malware in sbrugna...