CVE-2026-34461— Sandboxie-Plus SbieIniServer RunSbieCtrl stack buffer overflow allows local privilege escalation
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-34461
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Sandboxie-Plus SbieIniServer RunSbieCtrl stack buffer overflow allows local privilege escalation
Source: NVD (National Vulnerability Database)
Vulnerability Description
Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, the SbieIniServer RunSbieCtrl handler contains a stack buffer overflow. The MSGID_SBIE_INI_RUN_SBIE_CTRL message is handled before normal sandbox and impersonation checks, and for non-sandboxed callers, the handler copies the trailing message payload into a fixed-size WCHAR ctrlCmd[128] stack buffer using memcpy without verifying the length fits within the buffer. The service pipe is created with a NULL DACL, allowing any local interactive process to connect and send an oversized payload to overflow the stack. This can lead to a crash of the SbieSvc service or potential code execution as SYSTEM. This issue has been fixed in version 1.17.3.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
栈缓冲区溢出
Source: NVD (National Vulnerability Database)
Vulnerability Title
Sandboxie-Plus 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Sandboxie-Plus是Sandboxie-Plus公司的一款沙盒隔离软件。 Sandboxie-Plus 1.17.2及之前版本存在安全漏洞，该漏洞源于SbieIniServer的RunSbieCtrl处理程序存在栈缓冲区溢出，可能导致SbieSvc服务崩溃或SYSTEM权限代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| sandboxie-plus | Sandboxie | < 1.17.3 | - |
II. Public POCs for CVE-2026-34461
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-34461
请登录查看更多情报信息。
Same Patch Batch · sandboxie-plus · 2026-05-05 · 8 CVEs total
| CVE-2026-32603 | Sandboxie kernel driver denial of service via malformed IOCTL from sandboxed process | |
| CVE-2026-34596 | Sandboxie-Plus local privilege escalation via TOCTOU race condition in UpdUtil addon insta | |
| CVE-2026-34462 | Sandboxie-Plus ProcessServer boxname stack buffer overflows via unterminated wide string c | |
| CVE-2026-34458 | Sandboxie-Plus privilege escalation via INI CRLF injection bypassing EditAdminOnly | |
| CVE-2026-34527 | Sandboxie-Plus EditPassword hash entropy reduced from 160 bits to 80 bits due to incorrect | |
| CVE-2026-34459 | Sandboxie-Plus sandbox escape via uninitialized memory leak and stack overflow in GetRawIn | |
| CVE-2026-34464 | Sandboxie-Plus NamedPipeServer OpenHandler stack overflow via unterminated server field |
IV. Related Vulnerabilities
Same product: Sandboxie
- CVE-2026-34596
Sandboxie-Plus local privilege escalation via TOCTOU race co - CVE-2026-34527
Sandboxie-Plus EditPassword hash entropy reduced from 160 bi - CVE-2026-34464
Sandboxie-Plus NamedPipeServer OpenHandler stack overflow vi - CVE-2026-34462
Sandboxie-Plus ProcessServer boxname stack buffer overflows - CVE-2026-34459
Sandboxie-Plus sandbox escape via uninitialized memory leak
Same vendor: sandboxie-plus
- CVE-2026-34596
Sandboxie-Plus local privilege escalation via TOCTOU race co - CVE-2026-34527
Sandboxie-Plus EditPassword hash entropy reduced from 160 bi - CVE-2026-34464
Sandboxie-Plus NamedPipeServer OpenHandler stack overflow vi - CVE-2026-34462
Sandboxie-Plus ProcessServer boxname stack buffer overflows - CVE-2026-34459
Sandboxie-Plus sandbox escape via uninitialized memory leak
Same weakness: CWE-121
- CVE-2026-8258
Squirrel sqstdstring.cpp validate_format stack-based overflo - CVE-2026-8234
EFM ipTIME A8004T WifiBasicSet formWifiBasicSet stack-based - CVE-2026-6665
PgBouncer buffer overflow in SCRAM - CVE-2026-41509
Integer underflow in crypto_sign_open() leads to buffer over - CVE-2026-8138
Tenda CX12L SetPptpServerCfg” formSetPPTPServer stack-based
V. Comments for CVE-2026-34461
No comments yet