Windows Vulnerabilities Leaked: BitLocker & Privilege Escalation Flaws Exposed

A security researcher known as Chaotic Eclipse has released two new, unpatched vulnerabilities affecting Windows systems: YellowKey and GreenPlasma. This action stems from dissatisfaction with Microsoft's handling of security bug reports. YellowKey targets the Windows Recovery Environment to bypass BitLocker encryption, potentially allowing unauthorized access to encrypted files on devices with physical access.

GreenPlasma, conversely, is a privilege escalation vulnerability. It exploits the CTFMON input service to grant SYSTEM-level control, enabling threat actors to gain full command over a compromised system. These recent disclosures are part of a series of leaks from Chaotic Eclipse, which began in early April 2026, including previously revealed flaws like RedSun and BlueHammer, the latter patched as CVE-2026-33825.

Microsoft has issued a standard statement affirming its commitment to investigating reported security issues and supporting coordinated vulnerability disclosure. However, the effectiveness of proposed mitigations, such as using BitLocker PIN and BIOS passwords, remains a point of debate, with Chaotic Eclipse suggesting they do not fully address the threat.