GreatXML is a vulnerability tracked across 1 threat cluster and 3 intelligence report mentions on ThreatCluster. First observed June 11, 2026; most recent activity June 11, 2026.
The GreatXML vulnerability allows attackers to bypass BitLocker drive encryption on Windows systems by manipulating XML files in the recovery partition. Discovered by a researcher known as 'MSNightmare', this zero-day…