Back to Feed
Zero-dayMay 12, 2026

Yippie Two new Microsoft Windows 0days. The exploits have cool and badass mysterious names to be...

Two new Microsoft Windows zero-day vulnerabilities disclosed with codenames GreenPlasma and YellowKey.

Summary

Two previously unknown Microsoft Windows zero-day vulnerabilities have been disclosed: GreenPlasma, an arbitrary section creation elevation of privileges flaw in CTFMON, and YellowKey, a BitLocker bypass vulnerability. The vulnerabilities carry mysterious codenames and appear to be actively exploited or monitored by threat researchers.

Indicators of Compromise

  • malware — GreenPlasma
  • malware — YellowKey

Entities

Microsoft (vendor)Windows (product)CTFMON (product)BitLocker (product)