Sandboxie vulnerabilities
CVEs whose affected-version data names the Sandboxie package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-102280Medium· 6.9PoCSandboxie-Plus: Sandbox containment bypass
Sandboxie-Plus is an open source sandbox-based isolation software for Windows. Prior to 1.18.6, a process inside a sandbox could send MSGID_FILE_SET_ATTRIBUTES or MSGID_FILE_SET_SHORT_NAME to SbieSvc and cause the SYSTEM service to open …
▾ Twilightsandboxie-plus · SandboxieEPSS 0.11%via CVEORG
CVE-2025-64721Critical· 10.0Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems
Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. In versions 1.16.6 and below, the SYSTEM-level service SbieSvc.exe exposes SbieIniServer::RC4Crypt to sandboxed processes. The hand…
▾ Midnightsandboxie-plus · sandboxieEPSS 0.72%via NVD