Yellowkey-mitigation

Yellowkey-mitigation.ps1 is a PowerShell script that automates the WinRE mitigation workflow described in CVE-2026-45585, adds verification after every step, and does not execute step 6 reagentc /disable + reagentc /enable if any earlier step fails. It also checks whether the required registry...

YellowKey-WinRE-Remediation

YellowKey WinRE Remediation Intune Remediation package for the CVE-2026-45585 YellowKey BitLocker/WinRE bypass mitigation described in the provided procedure. This package removes autofstx.exe from the offline WinRE image's BootExecute value and refreshes WinRE registration so BitLocker trust is...

Script-For-CVE-2024-20666

Script-For-CVE-2024-20666 Automate updating the WinRE partition without having to resize it first and patch the CVE-2024-20666 BitLocker vulnerability. Microsoft Link Script found here Works for Windows Server 2022 Server Core installation KB5034439: Windows Recovery Environment update for Azure...

CVE-2024-20666

CVE-2024-20666 Vulnerability Patch Guide Welcome to the repository for addressing the CVE-2024-20666 vulnerability patch failures in the Windows Recovery Environment WinRE. Overview This repository provides resources and instructions to resolve patch failures related to the Windows OS update...

bitlocker-hardening

🔐 yellowkey-mitigation BitLocker TPM+PIN Hardening Against CVE-2026-45585 YellowKey Automated mitigation for the WinRE BitLocker bypass — no full patch available yet 🔍 The Vulnerability YellowKey is a publicly disclosed BitLocker bypass that gives an attacker with physical access an unrestricted...

WinRE-Patch

WinRE-Patch Patches CVE-2022-41099 Original: https://github.com/halsey51013/UpdateWindowsRE-CVE-2022-41099...

WinRE-Fix

WinRE-Fix PowerShell script to safely move/recreate Windows Recovery Environment WinRE to a new Recovery partition. Keywords: WinRE Windows Recovery Recovery Partition reagentc KB5034441 KB5028997 CVE-2024-20666 BitLocker Windows Update Fix Partition Resize GPT UEFI 🎯 What This Script Solves This...

CVE-2026-116638

The Windows Recovery Environment WinRE in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured UEFI/BIOS passwords. An attacker with physical or administrative access to a device may be able to leverage WinRE-related boot mechanisms to...

CVE-2026-116638

The Windows Recovery Environment WinRE in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured UEFI/BIOS passwords. An attacker with physical or administrative access to a device may be able to leverage WinRE-related boot mechanisms to...

EUVD-2026-110069

The Windows Recovery Environment WinRE in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured UEFI/BIOS passwords. An attacker with physical or administrative access to a device may be able to leverage WinRE-related boot mechanisms to...

PT-2026-125095

The Windows Recovery Environment WinRE in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administrator-configured UEFI/BIOS passwords. An attacker with physical or administrative access to a device may be able to leverage WinRE-related boot mechanisms to...

CVE-2026-116638

The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow attackers with physical or administrative access to bypass firmware security controls , including administrator-configured UEFI/BIOS passwords . The issue stems from inconsistent enforcement of security controls during recove...

GreatXML

GreatXML GreatXML bitlocker bypass vulnerability Steps to reproduce, 1. If defender offline scan was initiated in the victim machine at any point then there is no need to login, the machine is automatically vulnerable. You will have to copy "unattend.xml" and "Recovery" directory to the root of t...

YKWriter

YKWriter 🔑💾 YKWriter is a lightweight Windows Forms utili...

October 20, 2025—KB5070773 (OS Builds 26200.6901 and 26100.6901) Out-of-band

October 20, 2025—KB5070773 OS Builds 26200.6901 and 26100.6901 Out-of-band Applies To Windows 11 version 25H2, all editions Windows 11 version 24H2, all editions Windows Secure Boot certificate expiration Secure Boot certificates used by most Windows devices have started expiring in June 2026. Th...

KB5046398: Windows Recovery Environment update for Windows 11, version 21H2: October 8, 2024

KB5046398: Windows Recovery Environment update for Windows 11, version 21H2: October 8, 2024 Applies To Windows 11 SE, version 21H2 Windows 11 Home and Pro, version 21H2 Windows 11 Enterprise and Education, version 21H2 Windows 11 IoT Enterprise, version 21H2 Note IMPORTANT This update will not b...

KB5042320: Windows Recovery Environment update for Windows 10, version 21H2 and 22H2: January 9, 2024

KB5042320: Windows Recovery Environment update for Windows 10, version 21H2 and 22H2: January 9, 2024 Applies To Windows 10 Home and Pro, version 21H2 Windows 10 Enterprise and Education, version 21H2 Windows 10 IoT Enterprise, version 21H2 Windows 10 Home and Pro, version 22H2 Windows 10...

KB5042322: Windows Recovery Environment update for Windows Server 2022: January 9, 2024

KB5042322: Windows Recovery Environment update for Windows Server 2022: January 9, 2024 Applies To Windows Server 2022 Note IMPORTANT This update will not be offered if your Windows Recovery Environment WinRE meets any of the following conditions: If the WinRE recovery partition does not have...

KB5042321: Windows Recovery Environment update for Windows 11, version 21H2: January 9, 2024

KB5042321: Windows Recovery Environment update for Windows 11, version 21H2: January 9, 2024 Applies To Windows 11 SE, version 21H2 Windows 11 Home and Pro, version 21H2 Windows 11 Enterprise and Education, version 21H2 Windows 11 IoT Enterprise, version 21H2 Note IMPORTANT This update will not b...

January 10, 2023—KB5022297 (OS Build 10240.19685) - EXPIRED

January 10, 2023—KB5022297 OS Build 10240.19685 - EXPIRED Applies To Windows 10 EXPIRATION NOTICE IMPORTANT As of January 27, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. We recommend that you update your devices to the latest version of...