Windows BitLocker zero-day gives access to protected drives, PoC released

A researcher publicly released PoC exploits for two unpatched Windows vulnerabilities: YellowKey, a BitLocker bypass that leverages specially crafted FsTx files and WinRE behavior to spawn a shell with access to encrypted volumes on Windows 11 and Windows Server 2022/2025 (noted to affect TPM-only BitLocker configurations), and GreenPlasma, an incomplete but potentially chainable privilege-escalation issue capable of yielding SYSTEM privileges; independent researchers confirmed YellowKey and the researcher has signaled intent to continue leaking exploits.