Sandboxie-plus vulnerabilities

Products

• Sandboxie 20
• Sandboxie Plus 2

Newest

• sandboxie-plus sandboxie Sandboxie-Plus: Sandbox containment bypass CVE-2026-102280 6.9 MediumNovember 4, 2026
• sandboxie-plus sandboxie Sandboxie-Plus: Sandboxie APC Injection Sandbox Escape CVE-2026-45313 7.7 HighJuly 15, 2026
• sandboxie-plus sandboxie Sandboxie-Plus local privilege escalation via TOCTOU race condition in UpdUtil addon installation CVE-2026-34596 5.4 MediumMay 5, 2026
• sandboxie-plus sandboxie Sandboxie-Plus EditPassword hash entropy reduced from 160 bits to 80 bits due to incorrect nibble extraction CVE-2026-34527 2.0 LowMay 5, 2026
• sandboxie-plus sandboxie Sandboxie-Plus NamedPipeServer OpenHandler stack overflow via unterminated server field CVE-2026-34464 8.8 HighMay 5, 2026
• sandboxie-plus sandboxie Sandboxie-Plus ProcessServer boxname stack buffer overflows via unterminated wide string copy CVE-2026-34462 7.3 HighMay 5, 2026
• sandboxie-plus sandboxie Sandboxie-Plus SbieIniServer RunSbieCtrl stack buffer overflow allows local privilege escalation CVE-2026-34461 7.3 HighMay 5, 2026
• sandboxie-plus sandboxie Sandboxie-Plus sandbox escape via uninitialized memory leak and stack overflow in GetRawInputDeviceInfoSlave CVE-2026-34459 8.8 HighMay 5, 2026
• sandboxie-plus sandboxie Sandboxie-Plus privilege escalation via INI CRLF injection bypassing EditAdminOnly CVE-2026-34458 9.3 CriticalMay 5, 2026
• sandboxie-plus sandboxie Sandboxie kernel driver denial of service via malformed IOCTL from sandboxed process CVE-2026-32603 8.2 HighMay 5, 2026
• sandboxie Sandboxie 5.30 Denial of Service via Program Alerts Buffer Overflow CVE-2019-25551 6.9 MediumMarch 21, 2026
• sandboxie-plus sandboxie plus Sandboxie Plus v0.7.2 - 'SbieSvc' Unquoted Service Path CVE-2021-47883 8.5 HighJanuary 21, 2026
• sandboxie-plus sandboxie Sandboxie 5.49.7 - Denial of Service CVE-2021-47831 4.6 MediumJanuary 16, 2026
• sandboxie plus, sandboxie-plus sandboxie plus +1 more Sandboxie-Plus 5.50.2 - 'Service SbieSvc' Unquoted Service Path CVE-2022-50920 8.5 HighJanuary 13, 2026
• sandboxie-plus sandboxie Sandboxie's Integer Overflow in SbieIniServer::RC4Crypt allows sandbox escape and SYSTEM compromise CVE-2025-64721 9.9 CriticalDecember 11, 2025
• sandboxie-plus sandboxie Sandboxie exposes encrypted sandbox key during password change CVE-2025-54422 6.9 MediumJuly 29, 2025
• sandboxie-plus sandboxie Sandboxie Arbitrary Kernel Read in SbieDrv.sys API (API_SET_SECURE_PARAM) CVE-2025-46716 5.5 MediumMay 22, 2025
• sandboxie-plus sandboxie Sandboxie Arbitrary Kernel Write in SbieDrv.sys API (API_GET_SECURE_PARAM) CVE-2025-46715 7.8 HighMay 22, 2025
• sandboxie-plus sandboxie Sandboxie has Pool Buffer Overflow in SbieDrv.sys API (API_GET_SECURE_PARAM) CVE-2025-46714 7.8 HighMay 22, 2025
• sandboxie-plus sandboxie Sandboxie has Pool Buffer Overflow in SbieDrv.sys API (API_SET_SECURE_PARAM) CVE-2025-46713 7.8 HighMay 22, 2025
• sandboxie Path traversal in Sandboxie CVE-2024-49360 9.2 CriticalNovember 29, 2024
• sandboxie-plus sandboxie ** DISPUTED ** Sandboxie 5.26 allows a Sandbox Escape via an "import os" statement, followed by... CVE-2018-18748 Disputed 10.0 CriticalOctober 28, 2018