EUVD-2026-31006

Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey". The proof of concept for this vulnerability has been made public violating coordinated vulnerability best practices. We are issuing this CVE to provide mitigation guidance that can be...

PT-2026-42025

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Windows Server 2022 affected versions not specified Windows Server 2025 affected versions not specified Description A security feature bypass known as YellowKey exists in the BitLocker component of...

Vulnerability found in Microsoft Windows

A vulnerability has been found in Microsoft Windows' MSHTML component. A malicious party could potentially exploit it to execute arbitrary code under the privileges of a user. To do this, the malicious party needs to get the victim to to open a rogue Office document. Microsoft indicates that ther...