Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Sandboxie is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, a local denial of service vulnerability exists in the Sandboxie kernel driver. An unprivileged process running inside a Standard Sandbox can send a malformed IOCTL to the \Device\SandboxieDriverApi driver, triggering an immediate kernel crash (BSOD). The vulnerability affects the Standard Sandbox configuration both with and without dropped administrator privileges, but does not affect the Security Hardened Sandbox configuration. This issue has been fixed in version 1.17.3. Users who cannot update can use the Security Hardened Sandbox configuration as a workaround.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-32603 Local Denial of Service in Sandboxie Kernel Driver Versions 1.17.2 and Earlier https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-32603
Post summary
The text announces a local denial‑of‑service vulnerability in Sandboxie kernel drivers (v1.17.2 and earlier) with no additional exploit, patch, or active exploitation details.
CVE-2026-32603 Sandboxie is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, a local denial of service vulnerability exists in the Sandbo… https://www.cve.org/CVERecord?id=CVE-2026-32603
Post summary
CVE-2026-32603 refers to a local denial of service flaw in Sandboxie 1.17.2 and older versions.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | sandboxie-plus | sandboxie | - | - | - |