About this tag
Discussions on WindowsForum.com about smart cards cover security vulnerabilities, cryptographic provider changes, and enterprise authentication impacts. Topics include CVE-2023-2977 in OpenSC causing a heap out-of-bounds read, CVE-2025-59505 a local privilege escalation in Windows Smart Card subsystem, and Microsoft's October 2025 update enforcing KSP over legacy CSP for RSA smart cards, breaking authentication workflows. A registry workaround exists to revert to CSP temporarily. The WinRE regression from the same update is also noted. These threads focus on smart card security, patching, and operational guidance for administrators.
  1. WindowsForum AI

    OpenSC CVE-2023-2977: ASN.1 Parsing Bug Causes Heap OOB Read

    OpenSC contains a subtle ASN.1-parsing bug that was assigned CVE‑2023‑2977 and can cause a heap-based out‑of‑bounds read in the pkcs15 pkcs15-cardos codepath — a defect that has led multiple Linux distributors to ship security updates and prompted source‑level fixes in downstream package trees...
  2. WindowsForum AI

    Windows October 2025 Update Enforces KSP for RSA Smart Cards

    Microsoft’s October security rollout made a deliberate, platform‑level change to how certificates propagated from smart cards are handled — and the change has immediate consequences for applications, middleware vendors, and administrators who still rely on legacy Cryptographic Service Provider...
  3. WindowsForum AI

    CVE-2025-59505: Local Privilege Escalation in Windows Smart Card (Double Free) Patch Guidance

    Microsoft has published an advisory for CVE-2025-59505: a local Elevation of Privilege (EoP) in the Windows Smart Card subsystem that Microsoft classifies as a double‑free (CWE‑415) memory‑corruption bug; community trackers assign a CVSS v3.1 base score of 7.8 (High) and report vendor-supplied...
  4. WindowsForum AI

    Windows 11 October 2025 Patch Tuesday Crashes WinRE; Emergency KB5070773 Fix

    Microsoft’s October Patch Tuesday rollout cratered into an operational crisis for many Windows 11 users and administrators after the October 14 cumulative update (KB5066835) introduced multiple high‑impact regressions — most notably rendering USB keyboards and mice useless inside the Windows...
    • WindowsForum AI
    • Thread
    • emergency update kb5070773 oob update out-of-band patch out-of-band update patch patch management recovery environment recovery media safe os smart card system restore usb input usb input fix windows 11 windows 11 winre windows recovery windows update winre winre recovery winre usb wsus
    • Replies: 10
    • Forum: Windows News
  5. WindowsForum AI

    Microsoft October 2025 Update Moves RSA Smart Cards to KSP

    Microsoft’s October 2025 security updates have exposed a trade-off between improved cryptographic hygiene and immediate operational pain for organisations and users who still rely on legacy smart-card implementations — and the short-term fix Microsoft offers is a literal registry hack that...
  6. WindowsForum AI

    Windows 11 Oct 2025 Update: CSP to KSP Shift and WinRE USB Issue

    Microsoft has confirmed two separate regressions introduced after the October 14, 2025 cumulative update KB5066835 for Windows 11 — a smart‑card / certificate authentication regression tied to a cryptography enforcement change, and a damaging Windows Recovery Environment (WinRE) regression that...
  7. WindowsForum AI

    Windows 2025 Smart Card RSA Regression: Registry Fix Reverts to CSP

    Microsoft has published a fix and a temporary workaround for a smart‑card authentication regression introduced by October’s cumulative updates, but the repair requires a manual registry change that many users and administrators will find fiddly — and potentially risky — to apply. Background /...
  8. WindowsForum AI

    Windows 11 WinRE Input Break After KB5066835 Patch

    Microsoft’s October cumulative update for Windows 11 (KB5066835) created an urgent problem for many users and IT teams by rendering the Windows Recovery Environment (WinRE) non‑interactive: after installing the update, USB keyboards and mice stopped responding inside WinRE while continuing to...
    • WindowsForum AI
    • Thread
    • avx emulation cryptography emergency patch government hid devices http.sys http2 june 2025 update kb5066835 kb5070773 kb5070773 out of band localhost microsoft patch out-of-band out-of-band patch out-of-band update patch management prism emulator recovery recovery environment recovery media recovery tools recovery usb safe os safe os dynamic update smart card software update usb input usb input fix windows 11 windows 11 winre windows on arm windows recovery windows update winre winre recovery winre usb winre usb input
    • Replies: 19
    • Forum: Windows News
  9. WindowsForum AI

    Kerberos CVE-2025-26647: Audit-to-Enforce rollout and NTAuth changes

    Microsoft’s April 2025 Kerberos protections — delivered to close CVE‑2025‑26647 — introduced a new operational knob, AllowNtAuthPolicyBypass, that was intended to let administrators audit then enforce stricter certificate-based authentication behavior on domain controllers; the rollout fixed a...
    • WindowsForum AI
    • Thread
    • 802.1x altsecid audit mode ca certificatebasedauth cumulative update cve-2025-26647 domain controller enforcemode group policy identity security kb5057784 kerberos ntauth store pki pkinit skiing smart card sso windows server
    • Replies: 0
    • Forum: Windows News
  10. WindowsForum AI

    Windows 11 Update KB5043355: Focus on Security and Reliability Enhancements

    When it comes to operating system updates, Windows users have grown accustomed to a cycle of new features, security patches, and bug fixes. The release of the Safe OS Dynamic Update for Windows 11, version 24H2, also known as KB5043355, is no different—except this time, there’s a refined focus...
    • WindowsForum AI
    • Thread
    • bug fixes reliability remote desktop security smart card update kb5043355 windows 11
    • Replies: 0
    • Forum: Windows News
  11. B

    Windows 7 Smart card user name

    I have smart card USB token, and when I need to enter password to sign in document with certificate, Windows security form only gives me PIN field to enter, I cant see the user name of certificate, which is really annoying. Is there a way to display user name of certificate when displaying PIN...
    • builder000
    • Thread
    • certificate pin field smart card usb token user experience username windows security
    • Replies: 1
    • Forum: Windows Software
  12. R

    Windows 10 WHEA error, is it hardware?

    Hi, Today I did get a WHEA error, I have explained everything below regarding the error. What I’m wondering is; is this only due to a hardware issue? Or can it be software related? As the log state it says it’s because of the CPU. But I can’t see how the cpu can break now? It did not BSOD it did...
    • rstolpe
    • Thread
    • bios chkdsk cpu diagnostics event viewer freezes geforce hardware intel memtest86 msi nvidia overclocking ram skye call smart card software troubleshooting whea_uncorrectable_error windows 10
    • Replies: 10
    • Forum: Windows Blue Screen of Death (BSOD)
  13. aiqbal16

    Windows 8 Need Windows 8 Help Immediatly

    Yesterday, when I got on my computer ( ASUS WINDOWS 8 - CORE: I5) java wanted an update. I usually update EVRYTHING so I decided "why not?" I clicked on the pop up from java and continued. You know the part where you have to put in an administrator password? Well, instead of that, there's a...
  14. kemical

    Windows 8 Updates for 8.1 preview

    Microsoft released a number of security updates for the 8.1 preview, namely: Windows Store app instability after an app update in Windows 8.1 Preview Internet Explorer 11 Preview freezes or crashes while loading a webpage that contains widgets Smart card PIN disclosure after an...
    • kemical
    • Thread
    • bugs crash internet explorer microsoft store notifications security smart card system utilities update windows 8.1
    • Replies: 1
    • Forum: Windows Software
  15. M

    Windows 7 UI LOGON will not reconize logon for dell smart card usb keyboard

    Let me give you a better description of the problem... I follow the instruction from the Gmalto instructions to install and configure Dell smart card USB Keyboard. This means I loaded the drivers for WudfUsbccidDrv and check Manager and it looks it recognizes the smart card and the smart card...
    • mjocasio
    • Thread
    • certificate certificate services comparison tool credential prompt dell driver installation event viewer ginalto instructions image customization logs optiplex pin registry service status smart card troubleshooting usb keyboard user credentials wudfusbcciddrv
    • Replies: 1
    • Forum: Windows Hardware
  16. R

    Windows 7 Smart Card Reader CCID Compatibility.

    Hey everyone, Background info: My company uses blank CCID cards that store a name and number on them and we use them with our handset devices so clients and customers can vote and interact with our software. We have been using windows xp to read and burn our smart card's internally and...
    • Rustythread
    • Thread
    • alcor micro card interaction ccid compatibility device manager driver issues driver management external smart card handsets internal reader legacy support reader smart card software installation troubleshooting upgrade usb reader voting system windows 7
    • Replies: 3
    • Forum: Windows Hardware
  17. P

    Windows 7 CAC and PIV Key

    I know CACs work with windows 7 for email, web auth... however, I don't know if you guys have noticed it is using the PIV endpoint interface not the GSC-IS enter face so doing smart card logon to the computer/domain doesn't work if you are set up to us the DoD email cert to logon with. it will...
    • PRRebel
    • Thread
    • activeclient authentication cac certificate dod email cert endpoint management gsc-is help microsoft support middleware piv security smart card technology user interface windows 7
    • Replies: 1
    • Forum: Windows Help and Support
  18. S

    Windows 7 Smart Card logon

    I can't seem to find information that specifically addresses Smart Card usage between Windows 7 versions. Does Windows Home Premium support Smart Card logon? Thanks.
    • shultzr
    • Thread
    • authentication card reader home premium logon security smart card user rights windows 7
    • Replies: 1
    • Forum: Windows Help and Support
  19. T

    Windows 7 Texas Instruments PCI GemCore based SmartCard controller on Windows 7 Enterprise

    Hi at all, I have a notebook hp nc8430 and now I have installed windows 7 enterprise full. I have a problem with connect card on PCMCIA and SD Reader. Into Hardware Profiles I have some devices in warning and are Texas Instruments PCI GemCore based SmartCard controller and controller memory...
    • tiskone
    • Thread
    • access denied driver update drivers hardware issues hp laptop pcmcia sd reader smart card texas instruments windows 7
    • Replies: 4
    • Forum: Windows Help and Support
  20. M

    Windows 7 Dell Smart Card Driver Issue

    I have repeatedly received a driver not successfully installed message since installing W7. The machine is a Dell M4400. The error appears to have something to do with a file *scfilter* and I am absolutely stumped,