CVE-2026-45585

exploited in the wild

CVSS

6.8

Reports

First seen

May 20

Last seen

Jun 11

Affected product

Windows BitLocker

Associated actors

TeamPCP ×2 GHOST STADIUM ×1 Nightmare Eclipse ×1 RansomHouse ×1 RondoDox ×1 Shadow-Earth-053 ×1 ShinyHunters ×1 Silver Fox ×1 Storm-2949 ×1 UAT-8616 ×1 Fox Tempest ×1 UNG0002 ×1

Recent reports

High

Microsoft Patches Record 206 Vulnerabilities Including Three Zero-Days and Critical RCE Bugs

The Hacker NewsJun 10 High

High Threat Security Alert: Multiple Vulnerabilities in Microsoft Products (June 2026)

GovCERT.HKJun 10 Medium

Microsoft Monthly Security Update (June 2026)

HKCERTJun 10 High

CERT-EU Cyber Brief May 2026 – Espionage, Supply-Chain Attacks, and Ransomware Infrastructure Disruption

CERT-EU Threat IntelJun 2 Critical

Critical Windows Netlogon RCE Flaw Actively Exploited in Attacks

Bleeping ComputerJun 1 High

Microsoft Condemns Uncoordinated Zero-Day Disclosures; Researcher's GitHub Account Removed

The Hacker NewsMay 28 Critical

Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos

The Hacker NewsMay 25 High

Microsoft Releases Mitigation for YellowKey BitLocker Bypass CVE-2026-45585

The Hacker NewsMay 20 High

Microsoft shares mitigation for YellowKey Windows zero-day

Bleeping ComputerMay 20 Critical

Multiple Vulnerabilities in Microsoft Products (A26-05-33)

GovCERT.HKMay 20

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.