sandboxie-plus

Records21All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

sandboxie-plus records in CISA KEV

No sandboxie-plus vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Sandboxie 17 records HIGH

Records

21 records

TI-2025-40067 CVE-2025-64721

Sandboxie's Integer Overflow in SbieIniServer::RC4Crypt allows sandbox escape and SYSTEM compromise

HIGH 82

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems.

CVSS 4.0CRITICAL 9.9 Network No auth No interaction EPSS 0.00717 Published 2025-12-11 Fixed in 1.16.7 CWE-190

TI-2026-26723 CVE-2026-34458

Sandboxie-Plus privilege escalation via INI CRLF injection bypassing EditAdminOnly

HIGH 75

Sandboxie-Plus is an open source sandbox-based isolation software for Windows.

CVSS 4.0CRITICAL 9.3 Local Low privileges No interaction EPSS 0.00251 Published 2026-05-05 Fixed in 1.17.3 CWE-93

TI-2024-32948 CVE-2024-49360

Path traversal in Sandboxie

HIGH 75

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems.

CVSS 3.1CRITICAL 9.2 Local No auth No interaction EPSS 0.00494 Published 2024-11-29 No fix listed CWE-22

TI-2026-26724 CVE-2026-34459

Sandboxie-Plus sandbox escape via uninitialized memory leak and stack overflow in GetRawInputDeviceInfoSlave

HIGH 73

Sandboxie-Plus is an open source sandbox-based isolation software for Windows.

CVSS 4.0HIGH 8.8 Local Low privileges No interaction EPSS 0.00139 Published 2026-05-05 Fixed in 1.17.3 CWE-121

TI-2021-22497 CVE-2021-47883 · GHSA-jcwp-q8h7-72pm

Sandboxie Plus v0.7.2 - 'SbieSvc' Unquoted Service Path

HIGH 72

Sandboxie Plus 0.7.2 contains an unquoted service path vulnerability in the SbieSvc service that allows local attackers to execute code with elevated privileges.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00152 Published 2026-01-21 No fix listed CWE-428

TI-2026-33112 CVE-2026-45313

Sandboxie-Plus: Sandboxie APC Injection Sandbox Escape

HIGH 69

Sandboxie-Plus is an open source sandbox-based isolation software for Windows.

CVSS 3.1HIGH 7.7 Local No auth User interaction EPSS 0.00152 Published 2026-07-15 Fixed in 1.17.6 CWE-284

TI-2026-25112 CVE-2026-32603

Sandboxie kernel driver denial of service via malformed IOCTL from sandboxed process

HIGH 69

Sandboxie is an open source sandbox-based isolation software for Windows.

CVSS 4.0HIGH 8.2 Local Low privileges No interaction EPSS 0.00152 Published 2026-05-05 Fixed in 1.17.3 CWE-20

TI-2025-29386 CVE-2025-46715

Sandboxie Arbitrary Kernel Write in SbieDrv.sys API (API_GET_SECURE_PARAM)

HIGH 69

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00244 Published 2025-05-22 Fixed in 1.15.12 CWE-787

TI-2025-29385 CVE-2025-46714

Sandboxie has Pool Buffer Overflow in SbieDrv.sys API (API_GET_SECURE_PARAM)

HIGH 67

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00245 Published 2025-05-22 Fixed in 1.15.12 CWE-120

TI-2026-85242 CVE-2026-102280

Sandboxie-Plus: Sandbox containment bypass

MEDIUM 64

Sandboxie-Plus is an open source sandbox-based isolation software for Windows.

CVSS 4.0MEDIUM 6.9 Local Low privileges No interaction EPSS 0.00109 Published 2026-11-04 Fixed in 1.18.6 CWE-390

TI-2025-34227 CVE-2025-54422

Sandboxie exposes encrypted sandbox key during password change

MEDIUM 64

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.00085 Published 2025-07-29 Fixed in 1.16.2 CWE-312

TI-2019-15604 CVE-2019-25551 · GHSA-2fhg-mfw9-px88

Sandboxie 5.30 Denial of Service via Program Alerts Buffer Overflow

MEDIUM 64

Sandboxie 5.30 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Program Alerts configuration field.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.00176 Published 2026-03-21 No fix listed CWE-1282

TI-2026-26843 CVE-2026-34596

Sandboxie-Plus local privilege escalation via TOCTOU race condition in UpdUtil addon installation

MEDIUM 60

Sandboxie-Plus is an open source sandbox-based isolation software for Windows.

CVSS 4.0MEDIUM 5.4 Local Low privileges User interaction EPSS 0.00106 Published 2026-05-05 Fixed in 1.17.3 CWE-367

TI-2021-22447 CVE-2021-47831 · GHSA-j52p-j9xv-w569

Sandboxie 5.49.7 - Denial of Service

MEDIUM 54

Sandboxie 5.49.7 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the container folder input field.

CVSS 4.0MEDIUM 4.6 Local No auth User interaction EPSS 0.0037 Published 2026-01-16 No fix listed CWE-1284

TI-2018-13265 CVE-2018-18748 · GHSA-chm9-whw5-45wx

Sandboxie 5.26 allows a Sandbox Escape via an "import os" statement, followed by…

MEDIUM 53

Sandboxie 5.26 allows a Sandbox Escape via an "import os" statement, followed by os.system("cmd") or os.system("powershell"), within a .py file.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.02428 Published 2018-10-28 No fix listed

TI-2026-26776 CVE-2026-34527

Sandboxie-Plus EditPassword hash entropy reduced from 160 bits to 80 bits due to incorrect nibble extraction

MEDIUM 44

Sandboxie-Plus is an open source sandbox-based isolation software for Windows.

CVSS 4.0LOW 2.0 Local Low privileges No interaction EPSS 0.00091 Published 2026-05-05 Fixed in 1.17.3 CWE-328

TI-2026-26729 CVE-2026-34464

Sandboxie-Plus NamedPipeServer OpenHandler stack overflow via unterminated server field

LOW 39

Sandboxie-Plus is an open source sandbox-based isolation software for Windows.

CVSS 4.0HIGH 8.8 Local Low privileges No interaction EPSS 0.00174 Published 2026-05-05 Fixed in 1.17.3 CWE-121

TI-2025-29384 CVE-2025-46713

Sandboxie has Pool Buffer Overflow in SbieDrv.sys API (API_SET_SECURE_PARAM)

LOW 36

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00241 Published 2025-05-22 No fix listed CWE-120

TI-2026-26727 CVE-2026-34462

Sandboxie-Plus ProcessServer boxname stack buffer overflows via unterminated wide string copy

LOW 33

Sandboxie-Plus is an open source sandbox-based isolation software for Windows.

CVSS 4.0HIGH 7.3 Local Low privileges No interaction EPSS 0.00174 Published 2026-05-05 Fixed in 1.17.3 CWE-121

TI-2026-26726 CVE-2026-34461

Sandboxie-Plus SbieIniServer RunSbieCtrl stack buffer overflow allows local privilege escalation

LOW 33

Sandboxie-Plus is an open source sandbox-based isolation software for Windows.

CVSS 4.0HIGH 7.3 Local Low privileges No interaction EPSS 0.00172 Published 2026-05-05 Fixed in 1.17.3 CWE-121

TI-2025-29387 CVE-2025-46716

Sandboxie Arbitrary Kernel Read in SbieDrv.sys API (API_SET_SECURE_PARAM)

LOW 24

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00229 Published 2025-05-22 Fixed in 1.15.12 CWE-125

Open these records in search →

Critical	4
High	10
Medium	6
Low	1
No CVSS	0