KB5068861 FIDO2 Security Keys

Describe what you noticed and did

With KB5068861 installed, different Browser cannot access any of my FIDO2 Token. It only Works for "App Compartment" Type, but not for Standard or Hardened Type.

Windows: 11 Pro 24H2 Browsers: Firefox, Brave, Edge (all up to date) Token: Yubikey 5C & Feitian BioPass & NitroKey 3C Sandboxie-Plus 1.16.7 (but also with 1.16.4 I used before)

After uninstalling KB5068861 (and reboot, of course) it works again. FIDO2 App Template is activated all the time. I also tested if it makes difference when Browsers got access to every (*) IPC, File, Wnd with Standard and Hardened compartement type, but no difference.

Edit: Forget to mention, after installing KB5068861 again, the problem is back after a reboot, and if uninstall KB5068861 a x-nd time, its gone again.

How often did you encounter it so far?

Everytime

Expected behavior

Browsers can access FIDO2 Token when FIDO2 Template (OpenIpcPath=\RPC Control\keysvc) is activated.

Affected program

Firefox 145.0.1 (64b), Brave 1.84.141 (64b), Edge (64b)

Download link

https://www.catalog.update.microsoft.com/Search.aspx?q=KB5068861

Where is the program located?

The program is installed only outside the sandbox.

Did the program or any related process close unexpectedly?

No, not at all.

Crash dump

No response

What version of Sandboxie are you running now?

Sandboxie-Plus v1.16.7

Is it a new installation of Sandboxie?

I just updated Sandboxie from a previous version (I remember which one it is).

Is it a regression from previous versions?

No regression

In which sandbox type you have this problem?

In a standard isolation sandbox (yellow sandbox icon).

Can you reproduce this problem on a new empty sandbox?

I can confirm it also on a new empty sandbox.

What is your Windows edition and version?

Windows 11 Pro 24H2

In which Windows account you have this problem?

An account with UAC protection set to Always notify.

Please mention any installed security software

I tried with off.

Did you previously enable some security policy settings outside Sandboxie?

No.

Trace log

No response

Sandboxie.ini configuration