Zero-dayMay 12, 2026
Yippie Two new Microsoft Windows 0days. The exploits have cool and badass mysterious names to be...
Two new Microsoft Windows zero-day vulnerabilities disclosed with codenames GreenPlasma and YellowKey.
Summary
Two previously unknown Microsoft Windows zero-day vulnerabilities have been disclosed: GreenPlasma, an arbitrary section creation elevation of privileges flaw in CTFMON, and YellowKey, a BitLocker bypass vulnerability. The vulnerabilities carry mysterious codenames and appear to be actively exploited or monitored by threat researchers.
Indicators of Compromise
- malware — GreenPlasma
- malware — YellowKey
Entities
Microsoft (vendor)Windows (product)CTFMON (product)BitLocker (product)