CVE-2026-45585

Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey". The proof of concept for this vulnerability has been made public violating coordinated vulnerability best practices. We are issuing this CVE to provide mitigation guidance that can...

medium 6.8 CVSS 3.1
Published: May 20, 2026
Modified: May 20, 2026
Vendor: Microsoft
Product: Windows 11 24H2