A security researcher has publicly disclosed three unpatched Windows zero-day vulnerabilities, YellowKey, GreenPlasma, and MiniPlasma, as part of a sustained disclosure campaign following Patch Tuesday. No CVE IDs have been assigned and Microsoft has not confirmed official patches, leaving Windows enterprise environments exposed to privilege escalation and memory corruption attack paths. The disclosure pace is outrunning Microsoft’s patch cycle, multiplying unpatched exposure risk across potentially every Windows deployment in your organization.