VulnSocial

CVE-2026-34461Disclosure(sandboxie-plus / sandboxie)

LOWCVSS 7.8 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, the SbieIniServer RunSbieCtrl handler contains a stack buffer overflow. The MSGID_SBIE_INI_RUN_SBIE_CTRL message is handled before normal sandbox and impersonation checks, and for non-sandboxed callers, the handler copies the trailing message payload into a fixed-size WCHAR ctrlCmd[128] stack buffer using memcpy without verifying the length fits within the buffer. The service pipe is created with a NULL DACL, allowing any local interactive process to connect and send an oversized payload to overflow the stack. This can lead to a crash of the SbieSvc service or potential code execution as SYSTEM. This issue has been fixed in version 1.17.3.

sandboxie-plus CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references
Weakness type (CWE)
CWE-121

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • sandboxie

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • 3 total mentions across 1 day

Affected systems

Vendors
sandboxie-plus
Products
sandboxie

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-05-05: 3Technical Details · 2026-05-05: 305-05
Signal classification1 categories
Disclosure
3100.0%
Referenced assets4 URLs
Full discourse3 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-34461 Stack Buffer Overflow in Sandboxie-Plus SbieIniServer RunSbieCtrl Handle... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-34461 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3

    Post summary

    A new stack buffer overflow vulnerability (CVE-2026-34461) in Sandboxie-Plus SbieIniServer has been disclosed via a public alert, but no PoC, exploit, or patch information is included.

    0000041
    4.0K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-34461 Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, the SbieIniServer RunSbieCtrl handler contains a stack … https://www.cve.org/CVERecord?id=CVE-2026-34461 ----- Traducción: CVE-2026-34461 San… http://infoflow.cloud`

    Post summary

    The tweet references CVE‑2026‑34461, noting a stack buffer overflow in Sandboxie‑Plus, but provides no PoC, exploit code, active usage, or patch information.

    0000034
    75 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-34461 Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, the SbieIniServer RunSbieCtrl handler contains a stack … https://www.cve.org/CVERecord?id=CVE-2026-34461

    Post summary

    The text announces CVE-2026-34461 as a stack-related issue in Sandboxie-Plus’s SbieIniServer RunSbieCtrl handler, providing minimal technical detail and no exploit or mitigation information.

    00000137
    57.4K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appsandboxie-plussandboxie---

Explore more

Back to dashboardsandboxie-plus CVEssandboxie vulnerabilities