sandboxie-plus kayıtları
sandboxie-plus üreticisine ait 17 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %58,8
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-121 Stack-based Buffer Overflow4
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2
- CWE-1282 Assumed-Immutable Data is Stored in Writable Memory1
- CWE-190 Integer Overflow or Wraparound1
- CWE-20 Improper Input Validation1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
17 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2018-18748İstismar yok | Sandboxie 5.26 allows a Sandbox Escape via an "import os" statement, followed by os.system("cmd") or os.system("powershell"), within a .py fsandboxie-plus · sandboxie | Kritik10,0 | — | %2,4 | 29 Eki 2018 |
39İzleyin | CVE-2025-64721İstismar yok | Sandboxie's Integer Overflow in SbieIniServer::RC4Crypt allows sandbox escape and SYSTEM compromisesandboxie-plus · sandboxie · CWE-190 | Kritik9,9 | — | %0,7 | 11 Ara 2025 |
37İzleyin | CVE-2026-34458İstismar yok | Sandboxie-Plus privilege escalation via INI CRLF injection bypassing EditAdminOnlysandboxie-plus · sandboxie · CWE-93 | Kritik9,3 | — | %0,2 | 5 May 2026 |
35İzleyin | CVE-2026-34464İstismar yok | Sandboxie-Plus NamedPipeServer OpenHandler stack overflow via unterminated server fieldsandboxie-plus · sandboxie · CWE-121 | Yüksek8,8 | — | %0,1 | 5 May 2026 |
35İzleyin | CVE-2026-34459İstismar yok | Sandboxie-Plus sandbox escape via uninitialized memory leak and stack overflow in GetRawInputDeviceInfoSlavesandboxie-plus · sandboxie · CWE-121 | Yüksek8,8 | — | %0,1 | 5 May 2026 |
33İzleyin | CVE-2024-49360İstismar yok | Path traversal in Sandboxiesandboxie-plus · sandboxie · CWE-22 | Yüksek8,4 | — | %0,4 | 29 Kas 2024 |
32İzleyin | CVE-2026-32603İstismar yok | Sandboxie kernel driver denial of service via malformed IOCTL from sandboxed processsandboxie-plus · sandboxie · CWE-20 | Yüksek8,2 | — | %0,1 | 5 May 2026 |
31İzleyin | CVE-2025-46714İstismar yok | Sandboxie has Pool Buffer Overflow in SbieDrv.sys API (API_GET_SECURE_PARAM)sandboxie-plus · sandboxie · CWE-120 | Yüksek7,8 | — | %0,2 | 22 May 2025 |
31İzleyin | CVE-2025-46715İstismar yok | Sandboxie Arbitrary Kernel Write in SbieDrv.sys API (API_GET_SECURE_PARAM)sandboxie-plus · sandboxie · CWE-787 | Yüksek7,8 | — | %0,2 | 22 May 2025 |
31İzleyin | CVE-2025-46713İstismar yok | Sandboxie has Pool Buffer Overflow in SbieDrv.sys API (API_SET_SECURE_PARAM)sandboxie-plus · sandboxie · CWE-120 | Yüksek7,8 | — | %0,2 | 22 May 2025 |
29İzleyin | CVE-2026-34462İstismar yok | Sandboxie-Plus ProcessServer boxname stack buffer overflows via unterminated wide string copysandboxie-plus · sandboxie · CWE-121 | Yüksek7,3 | — | %0,1 | 5 May 2026 |
29İzleyin | CVE-2026-34461İstismar yok | Sandboxie-Plus SbieIniServer RunSbieCtrl stack buffer overflow allows local privilege escalationsandboxie-plus · sandboxie · CWE-121 | Yüksek7,3 | — | %0,1 | 5 May 2026 |
27İzleyin | CVE-2019-25551İstismar yok | Sandboxie 5.30 Denial of Service via Program Alerts Buffer Overflowsandboxie-plus · sandboxie · CWE-1282 | Orta6,9 | — | %0,1 | 21 Mar 2026 |
27İzleyin | CVE-2025-54422İstismar yok | Sandboxie exposes encrypted sandbox key during password changesandboxie-plus · sandboxie · CWE-312 | Orta6,9 | — | %0,0 | 29 Tem 2025 |
22İzleyin | CVE-2025-46716İstismar yok | Sandboxie Arbitrary Kernel Read in SbieDrv.sys API (API_SET_SECURE_PARAM)sandboxie-plus · sandboxie · CWE-125 | Orta5,5 | — | %0,2 | 22 May 2025 |
21İzleyin | CVE-2026-34596İstismar yok | Sandboxie-Plus local privilege escalation via TOCTOU race condition in UpdUtil addon installationsandboxie-plus · sandboxie · CWE-367 | Orta5,4 | — | %0,1 | 5 May 2026 |
8İzleyin | CVE-2026-34527İstismar yok | Sandboxie-Plus EditPassword hash entropy reduced from 160 bits to 80 bits due to incorrect nibble extractionsandboxie-plus · sandboxie · CWE-328 | Düşük2,0 | — | %0,0 | 5 May 2026 |
- CVE-2018-1874841Planlayın
Sandboxie 5.26 allows a Sandbox Escape via an "import os" statement, followed by os.system("cmd") or os.system("powershell"), within a .py f
KritikCVSS 10,0İstismar yokEPSS %2sandboxie-plus · sandboxie29 Eki 2018
- CVE-2025-6472139İzleyin
Sandboxie's Integer Overflow in SbieIniServer::RC4Crypt allows sandbox escape and SYSTEM compromise
KritikCVSS 9,9İstismar yokEPSS %0sandboxie-plus · sandboxie11 Ara 2025
- CVE-2026-3445837İzleyin
Sandboxie-Plus privilege escalation via INI CRLF injection bypassing EditAdminOnly
KritikCVSS 9,3İstismar yokEPSS %0sandboxie-plus · sandboxie5 May 2026
- CVE-2026-3446435İzleyin
Sandboxie-Plus NamedPipeServer OpenHandler stack overflow via unterminated server field
YüksekCVSS 8,8İstismar yokEPSS %0sandboxie-plus · sandboxie5 May 2026
- CVE-2026-3445935İzleyin
Sandboxie-Plus sandbox escape via uninitialized memory leak and stack overflow in GetRawInputDeviceInfoSlave
YüksekCVSS 8,8İstismar yokEPSS %0sandboxie-plus · sandboxie5 May 2026
- CVE-2024-4936033İzleyin
Path traversal in Sandboxie
YüksekCVSS 8,4İstismar yokEPSS %0sandboxie-plus · sandboxie29 Kas 2024
- CVE-2026-3260332İzleyin
Sandboxie kernel driver denial of service via malformed IOCTL from sandboxed process
YüksekCVSS 8,2İstismar yokEPSS %0sandboxie-plus · sandboxie5 May 2026
- CVE-2025-4671431İzleyin
Sandboxie has Pool Buffer Overflow in SbieDrv.sys API (API_GET_SECURE_PARAM)
YüksekCVSS 7,8İstismar yokEPSS %0sandboxie-plus · sandboxie22 May 2025
- CVE-2025-4671531İzleyin
Sandboxie Arbitrary Kernel Write in SbieDrv.sys API (API_GET_SECURE_PARAM)
YüksekCVSS 7,8İstismar yokEPSS %0sandboxie-plus · sandboxie22 May 2025
- CVE-2025-4671331İzleyin
Sandboxie has Pool Buffer Overflow in SbieDrv.sys API (API_SET_SECURE_PARAM)
YüksekCVSS 7,8İstismar yokEPSS %0sandboxie-plus · sandboxie22 May 2025
- CVE-2026-3446229İzleyin
Sandboxie-Plus ProcessServer boxname stack buffer overflows via unterminated wide string copy
YüksekCVSS 7,3İstismar yokEPSS %0sandboxie-plus · sandboxie5 May 2026
- CVE-2026-3446129İzleyin
Sandboxie-Plus SbieIniServer RunSbieCtrl stack buffer overflow allows local privilege escalation
YüksekCVSS 7,3İstismar yokEPSS %0sandboxie-plus · sandboxie5 May 2026
- CVE-2019-2555127İzleyin
Sandboxie 5.30 Denial of Service via Program Alerts Buffer Overflow
OrtaCVSS 6,9İstismar yokEPSS %0sandboxie-plus · sandboxie21 Mar 2026
- CVE-2025-5442227İzleyin
Sandboxie exposes encrypted sandbox key during password change
OrtaCVSS 6,9İstismar yokEPSS %0sandboxie-plus · sandboxie29 Tem 2025
- CVE-2025-4671622İzleyin
Sandboxie Arbitrary Kernel Read in SbieDrv.sys API (API_SET_SECURE_PARAM)
OrtaCVSS 5,5İstismar yokEPSS %0sandboxie-plus · sandboxie22 May 2025
- CVE-2026-3459621İzleyin
Sandboxie-Plus local privilege escalation via TOCTOU race condition in UpdUtil addon installation
OrtaCVSS 5,4İstismar yokEPSS %0sandboxie-plus · sandboxie5 May 2026
- CVE-2026-345278İzleyin
Sandboxie-Plus EditPassword hash entropy reduced from 160 bits to 80 bits due to incorrect nibble extraction
DüşükCVSS 2,0İstismar yokEPSS %0sandboxie-plus · sandboxie5 May 2026