What’s Vulnerable › Products
sandboxie-plus Sandboxie vulnerabilities
19 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 18 published in the last 12 months.
Check whether your sandboxie-plus Sandboxie version is affected
Latest sandboxie-plus Sandboxie vulnerabilities
- CVE-2026-45313 — Sandboxie-Plus: Sandboxie APC Injection Sandbox Escape (CVSS 7.7)
- CVE-2026-34596 — Sandboxie-Plus local privilege escalation via TOCTOU race condition in UpdUtil addon installation (CVSS 7.0)
- CVE-2026-34527 — Sandboxie-Plus EditPassword hash entropy reduced from 160 bits to 80 bits due to incorrect nibble extraction (CVSS 5.3)
- CVE-2026-34464 — Sandboxie-Plus NamedPipeServer OpenHandler stack overflow via unterminated server field (CVSS 8.8)
- CVE-2026-34462 — Sandboxie-Plus ProcessServer boxname stack buffer overflows via unterminated wide string copy (CVSS 7.8)
- CVE-2026-34461 — Sandboxie-Plus SbieIniServer RunSbieCtrl stack buffer overflow allows local privilege escalation (CVSS 7.8)
- CVE-2026-34459 — Sandboxie-Plus sandbox escape via uninitialized memory leak and stack overflow in GetRawInputDeviceInfoSlave (CVSS 8.8)
- CVE-2026-34458 — Sandboxie-Plus privilege escalation via INI CRLF injection bypassing EditAdminOnly (CVSS 8.8)
- CVE-2026-32603 — Sandboxie kernel driver denial of service via malformed IOCTL from sandboxed process (CVSS 6.5)
- CVE-2019-25551 — Sandboxie 5.30 Denial of Service via Program Alerts Buffer Overflow (CVSS 5.5)
- CVE-2021-47831 — Sandboxie 5.49.7 - Denial of Service (CVSS 7.5)
- CVE-2025-64721 — Sandboxie's Integer Overflow in SbieIniServer::RC4Crypt allows sandbox escape and SYSTEM compromise (CVSS 10.0)
- CVE-2025-54422 — Sandboxie exposes encrypted sandbox key during password change (CVSS 5.5)
- CVE-2025-46716 — Sandboxie Arbitrary Kernel Read in SbieDrv.sys API (API_SET_SECURE_PARAM) (CVSS 5.5)
- CVE-2025-46715 — Sandboxie Arbitrary Kernel Write in SbieDrv.sys API (API_GET_SECURE_PARAM) (CVSS 7.8)
- CVE-2025-46714 — Sandboxie has Pool Buffer Overflow in SbieDrv.sys API (API_GET_SECURE_PARAM) (CVSS 7.8)
- CVE-2025-46713 — Sandboxie has Pool Buffer Overflow in SbieDrv.sys API (API_SET_SECURE_PARAM) (CVSS 7.8)
- CVE-2024-49360 — Path traversal in Sandboxie (CVSS 8.4)
- CVE-2018-18748 — (CVSS 10.0)