SSandboxie-Plus

Products

Exploited and recent CVEs

• CVE-2026-102280 Medium 6.9 Sandboxie-Plus: Sandbox containment bypass 0.1%
• CVE-2026-45313 High 7.7 Sandboxie-Plus: Sandboxie APC Injection Sandbox Escape 0.2%
• CVE-2026-34596 Medium 5.4 Sandboxie-Plus local privilege escalation via TOCTOU race condition in UpdUtil addon installation 0.1%
• CVE-2026-34527 Low 2.0 Sandboxie-Plus EditPassword hash entropy reduced from 160 bits to 80 bits due to incorrect nibble extraction <0.1%
• CVE-2026-34464 High 8.8 Sandboxie-Plus NamedPipeServer OpenHandler stack overflow via unterminated server field 0.2%
• CVE-2026-34462 High 7.3 Sandboxie-Plus ProcessServer boxname stack buffer overflows via unterminated wide string copy 0.2%
• CVE-2026-34461 High 7.3 Sandboxie-Plus SbieIniServer RunSbieCtrl stack buffer overflow allows local privilege escalation 0.2%
• CVE-2026-34459 High 8.8 Sandboxie-Plus sandbox escape via uninitialized memory leak and stack overflow in GetRawInputDeviceInfoSlave 0.1%
• CVE-2026-34458 Critical 9.3 Sandboxie-Plus privilege escalation via INI CRLF injection bypassing EditAdminOnly 0.3%
• CVE-2026-32603 High 8.2 Sandboxie kernel driver denial of service via malformed IOCTL from sandboxed process 0.2%
• CVE-2021-47883 High 7.8 Sandboxie Plus v0.7.2 - 'SbieSvc' Unquoted Service Path 0.2%
• CVE-2021-47831 High 7.5 Sandboxie 5.49.7 - Denial of Service 0.4%
• CVE-2025-64721 Critical 9.9 Sandboxie's Integer Overflow in SbieIniServer::RC4Crypt allows sandbox escape and SYSTEM compromise 0.7%
• CVE-2025-54422 Medium 6.9 Sandboxie exposes encrypted sandbox key during password change <0.1%
• CVE-2025-46716 Medium 5.5 Sandboxie Arbitrary Kernel Read in SbieDrv.sys API (API_SET_SECURE_PARAM) 0.2%
• CVE-2025-46715 High 7.8 Sandboxie Arbitrary Kernel Write in SbieDrv.sys API (API_GET_SECURE_PARAM) 0.2%
• CVE-2025-46714 High 7.8 Sandboxie has Pool Buffer Overflow in SbieDrv.sys API (API_GET_SECURE_PARAM) 0.2%
• CVE-2025-46713 High 7.8 Sandboxie has Pool Buffer Overflow in SbieDrv.sys API (API_SET_SECURE_PARAM) 0.2%
• CVE-2024-49360 Critical 9.2 Path traversal in Sandboxie 0.5%