Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey". The proof of concept for this vulnerability has been made public violating coordinated vulnerability best practices.
We are issuing this CVE to provide mitigation guidance that can be implemented to protect against this vulnerability until the security update is made available.
CVE-2026-45585 is a Windows security feature bypass vulnerability known as 'YellowKey' that allows attackers to circumvent security controls. A proof of concept has been publicly disclosed, increasing the risk of exploitation before patches are available.
ثغرة YellowKey تسمح للمهاجمين بتجاوز ميزات الأمان الحرجة في نظام Windows. تم الكشف عن إثبات المفهوم علنًا، مما يزيد من خطر الاستغلال الفوري قبل توفر التصحيحات الأمنية.
This vulnerability affects Windows security features and has been publicly disclosed with working exploit code. Organizations should implement immediate mitigation strategies while awaiting official security updates from Microsoft.
Apply Microsoft security updates immediately upon release. Implement network segmentation to limit lateral movement. Monitor for suspicious process execution and unauthorized privilege escalation attempts. Disable unnecessary Windows features and services. Apply principle of least privilege to user accounts. Consider using application whitelisting to prevent unauthorized code execution.
طبق تحديثات أمان Microsoft فور إصدارها. نفذ تقسيم الشبكة لتحديد الحركة الجانبية. راقب محاولات تنفيذ العمليات المريبة وتصعيد الامتيازات غير المصرح بها. عطل الميزات والخدمات غير الضرورية في Windows. طبق مبدأ أقل امتياز على حسابات المستخدمين. فكر في استخدام القائمة البيضاء للتطبيقات.