Advisories · Technology
Sandboxie.
Every CVE that names Sandboxie among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
Sandboxie-Plus: Sandbox containment bypass
- Sandboxie
- Information disclosure
- Broken access control
- CVSS 7.7 High
Sandboxie-Plus: Sandboxie APC Injection Sandbox Escape
- Sandboxie
- Broken access control
- CVSS 5.4 Medium
Sandboxie-Plus local privilege escalation via TOCTOU race condition in UpdUtil addon installation
- Sandboxie
- Race condition
- CVSS 2.0 Low
Sandboxie-Plus EditPassword hash entropy reduced from 160 bits to 80 bits due to incorrect nibble extraction
- Sandboxie
- Weak cryptography or TLS
- CVSS 8.8 High
Sandboxie-Plus NamedPipeServer OpenHandler stack overflow via unterminated server field
- Sandboxie
- Memory corruption
- CWE-170
- CVSS 7.3 High
Sandboxie-Plus ProcessServer boxname stack buffer overflows via unterminated wide string copy
- Sandboxie
- Memory corruption
- CWE-170
- CVSS 7.3 High
Sandboxie-Plus SbieIniServer RunSbieCtrl stack buffer overflow allows local privilege escalation
- Sandboxie
- Memory corruption
- CVSS 8.8 High
Sandboxie-Plus sandbox escape via uninitialized memory leak and stack overflow in GetRawInputDeviceInfoSlave
- Sandboxie
- Memory corruption
- CVSS 9.3 CriticalCritical · CVSS 9+
Sandboxie-Plus privilege escalation via INI CRLF injection bypassing EditAdminOnly
- Sandboxie
- Other injection
- CVSS 8.2 High
Sandboxie kernel driver denial of service via malformed IOCTL from sandboxed process
- Sandboxie
- CWE-20
- CVSS 6.9 Medium
Sandboxie 5.30 Denial of Service via Program Alerts Buffer Overflow
- Sandboxie
- CWE-1282
- CVSS 4.6 Medium
Sandboxie 5.49.7 - Denial of Service
- Sandboxie
- CWE-1284
- CVSS 9.9 CriticalCritical · CVSS 9+
Sandboxie's Integer Overflow in SbieIniServer::RC4Crypt allows sandbox escape and SYSTEM compromise
- Sandboxie
- Memory corruption
- CVSS 6.9 Medium
Sandboxie exposes encrypted sandbox key during password change
- Sandboxie
- Information disclosure
- Hard-coded credentials
- CVSS 5.5 Medium
Sandboxie Arbitrary Kernel Read in SbieDrv.sys API (API_SET_SECURE_PARAM)
- Sandboxie
- Memory corruption
- CVSS 7.8 High
Sandboxie Arbitrary Kernel Write in SbieDrv.sys API (API_GET_SECURE_PARAM)
- Sandboxie
- Memory corruption
- CVSS 7.8 High
Sandboxie has Pool Buffer Overflow in SbieDrv.sys API (API_GET_SECURE_PARAM)
- Sandboxie
- Memory corruption
- CVSS 7.8 High
Sandboxie has Pool Buffer Overflow in SbieDrv.sys API (API_SET_SECURE_PARAM)
- Sandboxie
- Memory corruption
- CVSS 9.2 CriticalCritical · CVSS 9+
Path traversal in Sandboxie
- Sandboxie
- Path traversal