Info.plist parser USB driver Cryptographic tokens CCID/ICCD DoS

The vulnerability of the Info.plist parser, USB driver for smart card readers, and cryptographic tokens that comply with CCID/ICCD standards is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

Windows Smart Card Reader Privilege Escalation

The vulnerability of the Windows Smart Card Reader component in operating systems is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2025-59505 Windows Smart Card Reader Elevation of Privilege Vulnerability

...

CVE-2025-59505

CVE-2025-59505 is a Windows Smart Card Reader privilege-escalation vulnerability described as a double-free issue that could allow an authenticated local attacker to gain elevated privileges. The connected material confirms the CVE is categorized as a high-severity (CVSS v3.1 base 7.8) local, use...

CVE-2025-59505 Windows Smart Card Reader Elevation of Privilege Vulnerability

...

EUVD-2025-2377

Malicious code in bioql PyPI...

SmartCardReader Disclosure

The vulnerability of the SmartCardReader class in the Smart Cards for Windows service previously known as Smart Card Resource Manager in Windows operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to disclose sensitive...

CVE-2025-21312

Windows Smart Card Reader Information Disclosure Vulnerability...

CVE-2025-21312

Windows Smart Card Reader Information Disclosure Vulnerability...

CVE-2025-21312 Windows Smart Card Reader Information Disclosure Vulnerability

...

CVE-2025-21312

CVE-2025-21312 is described as a Windows Smart Card Reader Information Disclosure vulnerability. The core technical details available across connected sources are limited to the CVE label, a CVSSv3.1 base score of 2.4 (PHYSICAL attack, low impact on confidentiality, no impact on integrity/availab...

CVE-2025-21312 Windows Smart Card Reader Information Disclosure Vulnerability

...

Windows Smart Card Reader Information Disclosure Vulnerability

...

CVE-2025-21312: Use of Uninitialized Resource

Windows Smart Card Reader Information Disclosure Vulnerability...

PT-2025-1142

Name of the Vulnerable Software and Affected Versions Windows Smart Card Reader affected versions not specified Description The issue is related to the use of an uninitialized resource in the Smart Card Reader service for Windows, which can allow an attacker to disclose protected information. Thi...

January 10, 2017—KB3213986 (OS Build 14393.693)

January 10, 2017—KB3213986 OS Build 14393.693 Applies To Windows 10, version 1607, all editions Windows Server 2016, all editions Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Improved t...

VMware Workstation USB CCID Disclosure

The vulnerability of the USB CCID component of the VMware Workstation virtualization platform and the VMware Fusion hypervisor is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information that i...

Researchers Find Way to Recover Cryptographic Keys by Analyzing LED Flickers

In what's an ingenious side-channel attack, a group of academics has found that it's possible to recover secret keys from a device by analyzing video footage of its power LED. "Cryptographic computations performed by the CPU change the power consumption of the device which affects the brightness ...

Power LED Side-Channel Attack

This is a clever new side-channel attack: The first attack uses an Internet-connected surveillance camera to take a high-speed video of the power LED on a smart card reader­--or of an attached peripheral device--­during cryptographic operations. This technique allowed the researchers to pull a...

Malware-Infested Smart Card Reader

Brian Krebs has an interesting story of a smart ID card reader with a malware-infested Windows driver, and US government employees who inadvertently buy and use them. But by all accounts, the potential attack surface here is enormous, as many federal employees clearly will purchase these readers...