Skip to content
OpenAdvisories

Vendor

sandboxie-plus

19 known vulnerabilities.

Products

Sandboxie 18 Sandboxie Plus 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.9
    CVE-2026-102280

    Sandboxie-Plus: Sandbox containment bypass

    Sandboxie-Plus is an open source sandbox-based isolation software for Windows. Prior to 1.18.6, a process inside a sandbox could send MSGID_FILE_SET_ATTRIBUTES or MSGID_FILE_SET_SHORT_NAME to SbieSvc and cause the SYSTEM service to open and modify an existing…

    sandboxie-plus Sandboxie
  • Medium 5.4
    CVE-2026-34596

    Sandboxie-Plus local privilege escalation via TOCTOU race condition in UpdUtil addon installation

    Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, a Time-of-Check-to-Time-of-Use (TOCTOU) race condition exists during addon installation. When a user installs an addon through the SandMan interface…

    sandboxie-plus Sandboxie
  • Medium 6.9
    CVE-2025-54422

    Sandboxie exposes encrypted sandbox key during password change

    Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. In versions 1.16.1 and below, a critical security vulnerability exists in password handling mechanisms. During encrypted sandbox creation, user passwords…

    sandboxie-plus Sandboxie
  • Medium 5.5
    CVE-2025-46716

    Sandboxie Arbitrary Kernel Read in SbieDrv.sys API (API_SET_SECURE_PARAM)

    Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in version 1.3.0 and prior to version 1.15.12, Api_SetSecureParam fails to sanitize incoming pointers, and implicitly trusts that the pointer th…

    sandboxie-plus Sandboxie