---
id: "CVE-2026-105549"
page: "https://infrastack.ai/live/CVE-2026-105549"
kind: "vulnerability"
aliases: ["CVE-2026-105549"]
title: "Windows Smart Card: out-of-bounds read leaks data after physical access"
severity: "medium"
cvss: 4.3
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "smart-card", "windows"]
not_affected_if: ["no-smart-card-use"]
published_at: "2026-11-10T19:17:57+00:00"
first_seen_at: "2026-11-10T19:24:19+00:00"
updated_at: "2026-11-10T20:04:28+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105549", "first_seen_at": "2026-11-10T19:24:19+00:00"}]
exploit_sources: []
---

# Windows Smart Card: out-of-bounds read leaks data after physical access

Link for people: https://infrastack.ai/live/CVE-2026-105549 (this .md is for agents)

A flaw in the Windows Smart Card component lets an authorized local user read memory outside an intended buffer. An attacker with physical access to the machine can use it to disclose information.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:24:19+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-105549

## From the sources

Out-of-bounds read in Windows Smart Card allows an authorized attacker to disclose information with a physical attack.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_