tldrdailynews.com logo

Microsoft Patches Trio of Windows Zero-Days Exploited by Nightmare Eclipse

1 min read
Source: BleepingComputer
Microsoft Patches Trio of Windows Zero-Days Exploited by Nightmare Eclipse
Photo: BleepingComputer
TL;DR

Microsoft released June 2026 Patch Tuesday fixes for three Windows zero-days—GreenPlasma and MiniPlasma privilege-escalation flaws in the Collaborative Translation Framework and Cloud Files Mini Filter Driver, and YellowKey in WinRE—that could allow attackers to gain SYSTEM-level access or bypass BitLocker on patched Windows 11 and Windows Server 2022/2025 systems. The flaws were disclosed by Nightmare Eclipse in protest of MSRC handling, continuing a series of leaks and PoCs (BlueHammer, RedSun, UnDefend, RoguePlanet). Microsoft provided mitigations and warned about PoC disclosures, while saying it would coordinate with law enforcement if needed.

Topics:technologysecurity#bitlocker#nightmare-eclipse#patch-tuesday#security#windows#zero-day
Share this article
  1. Microsoft patches YellowKey, GreenPlasma, MiniPlasma zero-days  BleepingComputer
  2. Microsoft’s biggest-ever Patch Tuesday fixes 206 bugs, including 3 zero-days  Malwarebytes
  3. Microsoft and Adobe Patch Tuesday, June 2026 Security Update Review  Qualys
  4. Blame AI: Patch Tuesday Hits Record 206 CVEs  Dark Reading
  5. Microsoft Patches 200 Vulnerabilities  SecurityWeek

Want the full story? Read the original reporting

Read on BleepingComputer