# Sandboxie-Plus Sandboxie vulnerabilities

Source: https://junglewise.ai/threats/technologies/sandboxie  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/technologies/sandboxie.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 10 vulnerabilities in Sandboxie-Plus Sandboxie: 0 in the last 7 days and 0 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-45313, was published on 15 July 2026.

## Counts

- Last 7 days: 0
- Last 30 days: 0
- Last 90 days: 0
- All time: 10 (1 critical, 0 exploited in the wild)

## About Sandboxie-Plus Sandboxie

A sandbox-based isolation software that runs applications in a controlled environment to prevent permanent changes to the underlying system.

## Latest Sandboxie-Plus Sandboxie vulnerabilities

- [CVE-2026-45313: Sandboxie-Plus sandbox escape via APC injection in GuiServer](https://junglewise.ai/threats/cve-2026-45313-sandboxie-plus-sandbox-escape-via-apc-injection-in-guiserver) (high, CVSS 7.7, published 15 Jul 2026)
- [CVE-2026-34596: Sandboxie-Plus privilege escalation via TOCTOU in UpdUtil](https://junglewise.ai/threats/cve-2026-34596-sandboxie-plus-privilege-escalation-via-toctou-in-updutil) (high, CVSS 7, published 5 May 2026)
- [CVE-2026-34527: Sandboxie-Plus entropy loss in EditPassword hashing](https://junglewise.ai/threats/cve-2026-34527-sandboxie-plus-entropy-loss-in-editpassword-hashing) (medium, CVSS 5.3, published 5 May 2026)
- [CVE-2026-34464: Sandboxie-Plus stack overflow in NamedPipeServer OpenHandler](https://junglewise.ai/threats/cve-2026-34464-sandboxie-plus-stack-overflow-in-namedpipeserver-openhandler) (high, CVSS 8.8, published 5 May 2026)
- [CVE-2026-34462: Sandboxie-Plus stack buffer overflow in ProcessServer](https://junglewise.ai/threats/cve-2026-34462-sandboxie-plus-stack-buffer-overflow-in-processserver) (high, CVSS 7.8, published 5 May 2026)
- [CVE-2026-34461: Sandboxie-Plus stack buffer overflow in SbieIniServer RunSbieCtrl](https://junglewise.ai/threats/cve-2026-34461-sandboxie-plus-stack-buffer-overflow-in-sbieiniserver-runsbiectrl) (high, CVSS 7.8, published 5 May 2026)
- [CVE-2026-34459: Sandboxie-Plus Sandbox Escape and Privilege Escalation in SbieSvc](https://junglewise.ai/threats/cve-2026-34459-sandboxie-plus-sandbox-escape-and-privilege-escalation-in-sbiesvc) (high, CVSS 8.8, published 5 May 2026)
- [CVE-2026-34458: Sandboxie-Plus INI injection and privilege escalation](https://junglewise.ai/threats/cve-2026-34458-sandboxie-plus-ini-injection-and-privilege-escalation) (high, CVSS 8.8, published 5 May 2026)
- [CVE-2026-32603: Sandboxie kernel driver denial of service via malformed IOCTL](https://junglewise.ai/threats/cve-2026-32603-sandboxie-kernel-driver-denial-of-service-via-malformed-ioctl) (medium, CVSS 6.5, published 5 May 2026)
- [CVE-2025-64721: Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. In versions…](https://junglewise.ai/threats/cve-2025-64721-sandboxie-is-a-sandbox-based-isolation-software-for-32-bit-and-64) (critical, CVSS 10, published 11 Dec 2025)

## Most severe Sandboxie-Plus Sandboxie vulnerabilities

- [CVE-2025-64721: Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. In versions…](https://junglewise.ai/threats/cve-2025-64721-sandboxie-is-a-sandbox-based-isolation-software-for-32-bit-and-64) (critical, CVSS 10, published 11 Dec 2025)
- [CVE-2026-34458: Sandboxie-Plus INI injection and privilege escalation](https://junglewise.ai/threats/cve-2026-34458-sandboxie-plus-ini-injection-and-privilege-escalation) (high, CVSS 8.8, published 5 May 2026)
- [CVE-2026-34464: Sandboxie-Plus stack overflow in NamedPipeServer OpenHandler](https://junglewise.ai/threats/cve-2026-34464-sandboxie-plus-stack-overflow-in-namedpipeserver-openhandler) (high, CVSS 8.8, published 5 May 2026)
- [CVE-2026-34459: Sandboxie-Plus Sandbox Escape and Privilege Escalation in SbieSvc](https://junglewise.ai/threats/cve-2026-34459-sandboxie-plus-sandbox-escape-and-privilege-escalation-in-sbiesvc) (high, CVSS 8.8, published 5 May 2026)
- [CVE-2026-34462: Sandboxie-Plus stack buffer overflow in ProcessServer](https://junglewise.ai/threats/cve-2026-34462-sandboxie-plus-stack-buffer-overflow-in-processserver) (high, CVSS 7.8, published 5 May 2026)
- [CVE-2026-34461: Sandboxie-Plus stack buffer overflow in SbieIniServer RunSbieCtrl](https://junglewise.ai/threats/cve-2026-34461-sandboxie-plus-stack-buffer-overflow-in-sbieiniserver-runsbiectrl) (high, CVSS 7.8, published 5 May 2026)
- [CVE-2026-45313: Sandboxie-Plus sandbox escape via APC injection in GuiServer](https://junglewise.ai/threats/cve-2026-45313-sandboxie-plus-sandbox-escape-via-apc-injection-in-guiserver) (high, CVSS 7.7, published 15 Jul 2026)
- [CVE-2026-34596: Sandboxie-Plus privilege escalation via TOCTOU in UpdUtil](https://junglewise.ai/threats/cve-2026-34596-sandboxie-plus-privilege-escalation-via-toctou-in-updutil) (high, CVSS 7, published 5 May 2026)
- [CVE-2026-32603: Sandboxie kernel driver denial of service via malformed IOCTL](https://junglewise.ai/threats/cve-2026-32603-sandboxie-kernel-driver-denial-of-service-via-malformed-ioctl) (medium, CVSS 6.5, published 5 May 2026)
- [CVE-2026-34527: Sandboxie-Plus entropy loss in EditPassword hashing](https://junglewise.ai/threats/cve-2026-34527-sandboxie-plus-entropy-loss-in-editpassword-hashing) (medium, CVSS 5.3, published 5 May 2026)

## Vulnerabilities per week

Nothing was published in the last eight weeks.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 0 | 0 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 0 | 0 | 0 |
| 14 Sep 2026 | 0 | 0 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Other Sandboxie-Plus technologies

- [Sandboxie-Plus](https://junglewise.ai/threats/technologies/sandboxie-plus): 9 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Sandboxie-Plus Sandboxie vulnerabilities", https://junglewise.ai/threats/technologies/sandboxie, 9 November 2026.