Microsoft is working on a patch for ‘YellowKey’ attack on Bitlocker, offers temporary fix

Microsoft is developing a patch for the 'YellowKey' vulnerability, a zero-day flaw that allows attackers to bypass Bitlocker encryption on Windows devices, enabling them to access and modify files¹. The vulnerability, tracked as CVE-2026-45585, was publicly disclosed last week, and a proof of concept is already available. In response, Microsoft has issued an advisory outlining immediate mitigation steps for companies to take while a patch is being considered. The advisory provides temporary fixes to help organizations protect themselves from potential exploitation. The vulnerability is currently under discussion, and its exploitation status will determine whether immediate patching is necessary. This development matters to security practitioners because the presence of a public proof of concept and active discussion around CVE-2026-45585 indicate a potential imminent threat, making it essential to monitor the situation closely and apply the recommended temporary fixes.