GreenPlasma

Microsoft patched three zero-day vulnerabilities, two of which allow attackers to gain SYSTEM privileges on fully patched Windows systems, and a third that enables access to BitLocker-protected drives.

Microsoft released a record 200 security patches in June 2026's Patch Tuesday, with 30 critical vulnerabilities and public exploits for three flaws. AI tools are increasingly used to discover bugs, and researcher Nightmare Eclipse disclosed multiple zero-day exploits, including CVE-2026-49160 and CVE-2026-50507, sparking controversy over Microsoft's legal stance on researchers.

A security researcher has disclosed multiple Windows zero-day vulnerabilities over six weeks, including YellowKey, GreenPlasma, and MiniPlasma, adding to the growing list of security concerns. These disclosures highlight ongoing security issues with Windows. The vulnerabilities pose a significant risk to users.

A cybersecurity researcher has published proof-of-concept exploits for two unpatched Microsoft Windows vulnerabilities, named YellowKey and GreenPlasma, which are a BitLocker bypass and a privilege-escalation flaw. The vulnerabilities give access to protected drives. The exploits were released for Windows BitLocker.