CVE-2026-45585

exploited in the wild☆ pin

CVSS

6.8

Reports

First seen

May 20, 2026

Last seen

Jun 11, 2026

Affected product

Windows BitLocker

Associated actors

TeamPCP ×2 GHOST STADIUM ×1 Nightmare Eclipse ×1 RansomHouse ×1 RondoDox ×1 Shadow-Earth-053 ×1 ShinyHunters ×1 Silver Fox ×1 Storm-2949 ×1 UAT-8616 ×1 Fox Tempest ×1 UNG0002 ×1

Recent reports

High

Microsoft Patches Record 206 Vulnerabilities Including Three Zero-Days and Critical RCE Bugs

The Hacker NewsJun 10, 2026 High

High Threat Security Alert: Multiple Vulnerabilities in Microsoft Products (June 2026)

GovCERT.HKJun 10, 2026 Medium

Microsoft Monthly Security Update (June 2026)

HKCERTJun 10, 2026 High

CERT-EU Cyber Brief May 2026 – Espionage, Supply-Chain Attacks, and Ransomware Infrastructure Disruption

CERT-EU Threat IntelJun 2, 2026 Critical

Critical Windows Netlogon RCE Flaw Actively Exploited in Attacks

Bleeping ComputerJun 1, 2026 High

Microsoft Condemns Uncoordinated Zero-Day Disclosures; Researcher's GitHub Account Removed

The Hacker NewsMay 28, 2026 Critical

Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos

The Hacker NewsMay 25, 2026 High

Microsoft Releases Mitigation for YellowKey BitLocker Bypass CVE-2026-45585

The Hacker NewsMay 20, 2026 High

Microsoft shares mitigation for YellowKey Windows zero-day

Bleeping ComputerMay 20, 2026 Critical

Multiple Vulnerabilities in Microsoft Products (A26-05-33)

GovCERT.HKMay 20, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.