Sandboxie-Plus vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20256
3. 202612

Newest CVEs

• CVE-2026-102280

  Sandboxie-Plus: Sandbox containment bypass

  sandboxie-plus · Sandboxie

  Medium6.9
• CVE-2026-45313

  Sandboxie-Plus: Sandboxie APC Injection Sandbox Escape

  sandboxie-plus · Sandboxie

  High7.7
• CVE-2026-34596

  Sandboxie-Plus local privilege escalation via TOCTOU race condition in UpdUtil addon installation

  sandboxie-plus · Sandboxie

  Medium5.4
• CVE-2026-34527

  Sandboxie-Plus EditPassword hash entropy reduced from 160 bits to 80 bits due to incorrect nibble extraction

  sandboxie-plus · Sandboxie

  Low2.0
• CVE-2026-34464

  Sandboxie-Plus NamedPipeServer OpenHandler stack overflow via unterminated server field

  sandboxie-plus · Sandboxie

  High8.8
• CVE-2026-34462

  Sandboxie-Plus ProcessServer boxname stack buffer overflows via unterminated wide string copy

  sandboxie-plus · Sandboxie

  High7.3
• CVE-2026-34461

  Sandboxie-Plus SbieIniServer RunSbieCtrl stack buffer overflow allows local privilege escalation

  sandboxie-plus · Sandboxie

  High7.3
• CVE-2026-34459

  Sandboxie-Plus sandbox escape via uninitialized memory leak and stack overflow in GetRawInputDeviceInfoSlave

  sandboxie-plus · Sandboxie

  High8.8
• CVE-2026-34458

  Sandboxie-Plus privilege escalation via INI CRLF injection bypassing EditAdminOnly

  sandboxie-plus · Sandboxie

  Critical9.3
• CVE-2026-32603

  Sandboxie kernel driver denial of service via malformed IOCTL from sandboxed process

  sandboxie-plus · Sandboxie

  High8.2