<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 19 Jun 2026 03:29:11 +0000</lastBuildDate>
    <item>
      <title>3ee4d455-02fc-46cb-87a8-20043811b430</title>
      <link>https://vulnerability.circl.lu/sighting/3ee4d455-02fc-46cb-87a8-20043811b430/export</link>
      <description>{"uuid": "3ee4d455-02fc-46cb-87a8-20043811b430", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50507", "type": "seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3mnv7r5fzdlt2", "content": "Based on the `Publicly disclosed: yes`, we can make an educated guess that CVE-2026-50507 is for bitskrieg. Because MSRC doesn't describe their updates in a way that uniquely identify them, educated guesses is the best we can do. (There are **three** [\u2026] \n\n[Original post on infosec.exchange]", "creation_timestamp": "2026-06-09T22:13:28.460059Z"}</description>
      <content:encoded>{"uuid": "3ee4d455-02fc-46cb-87a8-20043811b430", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50507", "type": "seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3mnv7r5fzdlt2", "content": "Based on the `Publicly disclosed: yes`, we can make an educated guess that CVE-2026-50507 is for bitskrieg. Because MSRC doesn't describe their updates in a way that uniquely identify them, educated guesses is the best we can do. (There are **three** [\u2026] \n\n[Original post on infosec.exchange]", "creation_timestamp": "2026-06-09T22:13:28.460059Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3ee4d455-02fc-46cb-87a8-20043811b430/export</guid>
      <pubDate>Tue, 09 Jun 2026 22:13:28 +0000</pubDate>
    </item>
    <item>
      <title>5a8e7797-39c0-4073-8374-f1085147e5a3</title>
      <link>https://vulnerability.circl.lu/sighting/5a8e7797-39c0-4073-8374-f1085147e5a3/export</link>
      <description>{"uuid": "5a8e7797-39c0-4073-8374-f1085147e5a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50507", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mnvaw2eul62j", "content": "Microsoft's June 2026 Patch Tuesday, released on June 9, addresses 198 vulnerabilities, including three zero-days: CVE-2026-50507 (BitLocker bypass), CVE-2026-49160 (HTTP.sys DoS), and CVE-2026-45586. Critical RCE vulnerabilities include multiple CVEs in Remote Desktop Client and Windows Hyper-V.", "creation_timestamp": "2026-06-09T22:33:42.462848Z"}</description>
      <content:encoded>{"uuid": "5a8e7797-39c0-4073-8374-f1085147e5a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50507", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mnvaw2eul62j", "content": "Microsoft's June 2026 Patch Tuesday, released on June 9, addresses 198 vulnerabilities, including three zero-days: CVE-2026-50507 (BitLocker bypass), CVE-2026-49160 (HTTP.sys DoS), and CVE-2026-45586. Critical RCE vulnerabilities include multiple CVEs in Remote Desktop Client and Windows Hyper-V.", "creation_timestamp": "2026-06-09T22:33:42.462848Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5a8e7797-39c0-4073-8374-f1085147e5a3/export</guid>
      <pubDate>Tue, 09 Jun 2026 22:33:42 +0000</pubDate>
    </item>
    <item>
      <title>18261165-cad4-4049-8d6a-b2226a53055d</title>
      <link>https://vulnerability.circl.lu/sighting/18261165-cad4-4049-8d6a-b2226a53055d/export</link>
      <description>{"uuid": "18261165-cad4-4049-8d6a-b2226a53055d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50507", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-21", "content": "", "creation_timestamp": "2026-06-10T00:07:49.000000Z"}</description>
      <content:encoded>{"uuid": "18261165-cad4-4049-8d6a-b2226a53055d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-50507", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-21", "content": "", "creation_timestamp": "2026-06-10T00:07:49.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/18261165-cad4-4049-8d6a-b2226a53055d/export</guid>
      <pubDate>Wed, 10 Jun 2026 00:07:49 +0000</pubDate>
    </item>
    <item>
      <title>0553fc5f-bfa1-4e5b-9f8f-9dd8d4d89590</title>
      <link>https://vulnerability.circl.lu/sighting/0553fc5f-bfa1-4e5b-9f8f-9dd8d4d89590/export</link>
      <description>{"uuid": "0553fc5f-bfa1-4e5b-9f8f-9dd8d4d89590", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50507", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mnvqaj7bazo2", "content": "Microsoft\u2019s June 2026 Patch Tuesday Addresses 198 CVEs ( CVE-2026-49160, CVE-2026-50507) 32 Critical 166 Important 0 Moderate 0 Low Microsoft addresses 198 CVEs in the largest Patch Tuesday relea...\n\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-10T03:08:04.583815Z"}</description>
      <content:encoded>{"uuid": "0553fc5f-bfa1-4e5b-9f8f-9dd8d4d89590", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50507", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mnvqaj7bazo2", "content": "Microsoft\u2019s June 2026 Patch Tuesday Addresses 198 CVEs ( CVE-2026-49160, CVE-2026-50507) 32 Critical 166 Important 0 Moderate 0 Low Microsoft addresses 198 CVEs in the largest Patch Tuesday relea...\n\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-10T03:08:04.583815Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0553fc5f-bfa1-4e5b-9f8f-9dd8d4d89590/export</guid>
      <pubDate>Wed, 10 Jun 2026 03:08:04 +0000</pubDate>
    </item>
    <item>
      <title>562391f5-d311-4a11-a11a-1fe67faa4053</title>
      <link>https://vulnerability.circl.lu/sighting/562391f5-d311-4a11-a11a-1fe67faa4053/export</link>
      <description>{"uuid": "562391f5-d311-4a11-a11a-1fe67faa4053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-50507", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mnvrw4oie627", "content": "\ud83d\udcf0 Rekapitulasi Raksasa Patch Tuesday Microsoft Juni 2026: Tambal 3 Zero-Day dan 200 Celah Keamanan\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/06/10/microsoft-patch-tuesday-juni-2026-tambal-200-celah-keamanan/\n\n#bitlockerBypass #cve-2026-45586 #cve-2026-49160 #cve-2026-50507 #g", "creation_timestamp": "2026-06-10T03:37:57.604864Z"}</description>
      <content:encoded>{"uuid": "562391f5-d311-4a11-a11a-1fe67faa4053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-50507", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mnvrw4oie627", "content": "\ud83d\udcf0 Rekapitulasi Raksasa Patch Tuesday Microsoft Juni 2026: Tambal 3 Zero-Day dan 200 Celah Keamanan\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/06/10/microsoft-patch-tuesday-juni-2026-tambal-200-celah-keamanan/\n\n#bitlockerBypass #cve-2026-45586 #cve-2026-49160 #cve-2026-50507 #g", "creation_timestamp": "2026-06-10T03:37:57.604864Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/562391f5-d311-4a11-a11a-1fe67faa4053/export</guid>
      <pubDate>Wed, 10 Jun 2026 03:37:57 +0000</pubDate>
    </item>
    <item>
      <title>517cd114-6434-4ef7-a91e-22aa0ab79357</title>
      <link>https://vulnerability.circl.lu/sighting/517cd114-6434-4ef7-a91e-22aa0ab79357/export</link>
      <description>{"uuid": "517cd114-6434-4ef7-a91e-22aa0ab79357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50507", "type": "seen", "source": "https://bsky.app/profile/ingabreuortiz.bsky.social/post/3mnwphe5ab22y", "content": "Nueva Vulnerabilidad 0-day de Windows BitLocker permite saltar la seguridad\n\nMicrosoft revel\u00f3 el 9 de junio de 2026 una vulnerabilidad de omisi\u00f3n de la funci\u00f3n de seguridad de Windows BitLocker , identificada como CVE-2026-50507\n\n blog.elhacker.net/2026/06/vuln...", "creation_timestamp": "2026-06-10T12:26:35.060476Z"}</description>
      <content:encoded>{"uuid": "517cd114-6434-4ef7-a91e-22aa0ab79357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50507", "type": "seen", "source": "https://bsky.app/profile/ingabreuortiz.bsky.social/post/3mnwphe5ab22y", "content": "Nueva Vulnerabilidad 0-day de Windows BitLocker permite saltar la seguridad\n\nMicrosoft revel\u00f3 el 9 de junio de 2026 una vulnerabilidad de omisi\u00f3n de la funci\u00f3n de seguridad de Windows BitLocker , identificada como CVE-2026-50507\n\n blog.elhacker.net/2026/06/vuln...", "creation_timestamp": "2026-06-10T12:26:35.060476Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/517cd114-6434-4ef7-a91e-22aa0ab79357/export</guid>
      <pubDate>Wed, 10 Jun 2026 12:26:35 +0000</pubDate>
    </item>
    <item>
      <title>1a7fa939-7d9b-4e22-bdaf-cce9adc80976</title>
      <link>https://vulnerability.circl.lu/sighting/1a7fa939-7d9b-4e22-bdaf-cce9adc80976/export</link>
      <description>{"uuid": "1a7fa939-7d9b-4e22-bdaf-cce9adc80976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50507", "type": "seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3mnxsfxtffyy2", "content": "Interestingly, while the three bitlocker bypass CVEs in June's updates (CVE-2026-45655, CVE-2026-45658, and CVE-2026-50507, if we take a Windows 11 25H2 VM and install **only*`KB5094126` on it (which fixes all three CVEs), we can see that we can **still** [\u2026] \n\n[Original post on infosec.exchange]", "creation_timestamp": "2026-06-10T22:52:25.774459Z"}</description>
      <content:encoded>{"uuid": "1a7fa939-7d9b-4e22-bdaf-cce9adc80976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50507", "type": "seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3mnxsfxtffyy2", "content": "Interestingly, while the three bitlocker bypass CVEs in June's updates (CVE-2026-45655, CVE-2026-45658, and CVE-2026-50507, if we take a Windows 11 25H2 VM and install **only*`KB5094126` on it (which fixes all three CVEs), we can see that we can **still** [\u2026] \n\n[Original post on infosec.exchange]", "creation_timestamp": "2026-06-10T22:52:25.774459Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1a7fa939-7d9b-4e22-bdaf-cce9adc80976/export</guid>
      <pubDate>Wed, 10 Jun 2026 22:52:25 +0000</pubDate>
    </item>
    <item>
      <title>8e711570-ba89-4e87-88ce-595457559538</title>
      <link>https://vulnerability.circl.lu/sighting/8e711570-ba89-4e87-88ce-595457559538/export</link>
      <description>{"uuid": "8e711570-ba89-4e87-88ce-595457559538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50507", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mnxwfaylc22s", "content": "Microsoft\u30012026\u5e746\u6708\u5b9a\u4f8b\u30d1\u30c3\u30c1\u3067\u53f2\u4e0a\u6700\u591a206\u4ef6\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63-3\u4ef6\u306e\u30bc\u30ed\u30c7\u30a4\u3084\u5371\u967a\u306a\u8106\u5f31\u6027\u542b\u3080(CVE-2026-50507,CVE-2026-45586,CVE-2026-47291,CVE-2026-49160)\n\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "creation_timestamp": "2026-06-11T00:03:23.536827Z"}</description>
      <content:encoded>{"uuid": "8e711570-ba89-4e87-88ce-595457559538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50507", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mnxwfaylc22s", "content": "Microsoft\u30012026\u5e746\u6708\u5b9a\u4f8b\u30d1\u30c3\u30c1\u3067\u53f2\u4e0a\u6700\u591a206\u4ef6\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63-3\u4ef6\u306e\u30bc\u30ed\u30c7\u30a4\u3084\u5371\u967a\u306a\u8106\u5f31\u6027\u542b\u3080(CVE-2026-50507,CVE-2026-45586,CVE-2026-47291,CVE-2026-49160)\n\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews", "creation_timestamp": "2026-06-11T00:03:23.536827Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8e711570-ba89-4e87-88ce-595457559538/export</guid>
      <pubDate>Thu, 11 Jun 2026 00:03:23 +0000</pubDate>
    </item>
    <item>
      <title>445bda57-1c4b-440a-a96d-8f6c0a9e67ba</title>
      <link>https://vulnerability.circl.lu/sighting/445bda57-1c4b-440a-a96d-8f6c0a9e67ba/export</link>
      <description>{"uuid": "445bda57-1c4b-440a-a96d-8f6c0a9e67ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50507", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mnz33o2ngj2h", "content": "Microsoft June 2026 Patch Tuesday: 200 CVEs (record). BitLocker bypass CVE-2026-50507 patches TPM-only physical access attack.\n\nExchange permanent fix. And an unpatched Defender LPE (RoguePlanet) dropped by a researcher hours after. \n\n#PatchTuesday #Microsoft #CyberSecurity", "creation_timestamp": "2026-06-11T11:00:06.905365Z"}</description>
      <content:encoded>{"uuid": "445bda57-1c4b-440a-a96d-8f6c0a9e67ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50507", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mnz33o2ngj2h", "content": "Microsoft June 2026 Patch Tuesday: 200 CVEs (record). BitLocker bypass CVE-2026-50507 patches TPM-only physical access attack.\n\nExchange permanent fix. And an unpatched Defender LPE (RoguePlanet) dropped by a researcher hours after. \n\n#PatchTuesday #Microsoft #CyberSecurity", "creation_timestamp": "2026-06-11T11:00:06.905365Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/445bda57-1c4b-440a-a96d-8f6c0a9e67ba/export</guid>
      <pubDate>Thu, 11 Jun 2026 11:00:06 +0000</pubDate>
    </item>
    <item>
      <title>5a37c080-5f96-4467-bc7b-765781cd46c1</title>
      <link>https://vulnerability.circl.lu/sighting/5a37c080-5f96-4467-bc7b-765781cd46c1/export</link>
      <description>{"uuid": "5a37c080-5f96-4467-bc7b-765781cd46c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50507", "type": "seen", "source": "https://bsky.app/profile/hakksaww.bsky.social/post/3mo6jzev7672b", "content": "Three BitLocker bypasses in eight days \u2014 CVE-2026-50507, YellowKey/45585, now GreatXML \u2014 two from the same hand. The recovery partition is the door nobody guards. And banning the researcher didn't stop disclosure; it just moved it off GitHub, out of Microsoft's reach.", "creation_timestamp": "2026-06-13T15:10:34.818950Z"}</description>
      <content:encoded>{"uuid": "5a37c080-5f96-4467-bc7b-765781cd46c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-50507", "type": "seen", "source": "https://bsky.app/profile/hakksaww.bsky.social/post/3mo6jzev7672b", "content": "Three BitLocker bypasses in eight days \u2014 CVE-2026-50507, YellowKey/45585, now GreatXML \u2014 two from the same hand. The recovery partition is the door nobody guards. And banning the researcher didn't stop disclosure; it just moved it off GitHub, out of Microsoft's reach.", "creation_timestamp": "2026-06-13T15:10:34.818950Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5a37c080-5f96-4467-bc7b-765781cd46c1/export</guid>
      <pubDate>Sat, 13 Jun 2026 15:10:34 +0000</pubDate>
    </item>
  </channel>
</rss>
