BitLocker — PoC Archivehttps://poc.intelseclab.com/tags/bitlocker/Latest proof-of-concept entries.Hugoen-usMon, 27 Jul 2026 00:00:00 +0000GreatXML — WinRE / Defender Offline-Scan Trust-Boundary Abuse → BitLocker Bypass (No CVE)https://poc.intelseclab.com/pocs/binary/2026-07-27_greatxml-winre-bitlocker-bypass/Mon, 27 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-27_greatxml-winre-bitlocker-bypass/High severity — binary · N/A (no CVE assigned, no Microsoft advisory as of 2026-07-27). Status: Unpatched. Affects: Windows Recovery Environment (WinRE) — Microsoft Defender Offline Scan launch path (ReAgent.xml scheduled operation). Tags: windows, bitlocker, winre, defender, offline-scan, trust-boundary-bypass, zero-day, unpatched, physical-access, local.binaryHighwindowsbitlockerwinredefenderoffline-scantrust-boundary-bypasszero-dayunpatchedphysical-accesslocalYellowKey — BitLocker Bypass via WinRE autofstx.exe (CVE-2026-45585)https://poc.intelseclab.com/pocs/misc/2026-06-26_yellowkey-bitlocker-bypass/Fri, 26 Jun 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-06-26_yellowkey-bitlocker-bypass/Medium severity (CVSS 6.1) — misc · CVE-2026-45585. Status: Researched. Affects: Windows BitLocker / WinRE (autofstx.exe). Tags: BitLocker, bypass, physical-access, WinRE, TPM, autofstx, NTFS-transactions, FsTx, Windows-11, Windows-Server-2022, zero-day, full-disk-access.miscMediumBitLockerbypassphysical-accessWinRETPMautofstxNTFS-transactionsFsTxWindows-11Windows-Server-2022zero-dayfull-disk-access