← Vulnerability feed

Vulnerability record · CVE-2025-64721 · published 11 December 2025

CVE-2025-64721: Sandboxie-plus sandboxie integer overflow vulnerability

Sandboxie Plus · Sandboxie

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. In versions 1.16.6 and below, the SYSTEM-level service SbieSvc.exe exposes SbieIniServer::RC4Crypt to sandboxed processes. The handler adds a fixed header size to a caller-controlled value_len without overflow checking. A large value_len (e.g., 0xFFFFFFF0) wraps the allocation size, causing a heap overflow when attacker data is copied into the undersized buffer. This allows sandboxed processes to execute arbitrary code as SYSTEM, fully compromising the host. This issue is fixed in version 1.16.7.

9.9 CVSS 4.0 Critical EPSS 0.72% · top 47.9% CWE-190 · Integer overflow
9.9CVSS 4.0 base score
0.72%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. In versions 1.16.6 and below, the SYSTEM-level service SbieSvc.exe exposes SbieIniServer::RC4Crypt to sandboxed processes. The handler adds a fixed header size to a caller-controlled value_len without overflow checking. A large value_len (e.g., 0xFFFFFFF0) wraps the allocation size, causing a heap overflow when attacker data is copied into the undersized buffer. This allows sandboxed processes to execute arbitrary code as SYSTEM, fully compromising the host. This issue is fixed in version 1.16.7.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/sandboxie-plus/Sandboxie/commit/000492f8c411d24292f1b977a107994347bc7dfa Patch
https://github.com/sandboxie-plus/Sandboxie/releases/tag/v1.16.7 Release Notes
https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-w476-j57g-96vp ExploitVendor Advisory
https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-w476-j57g-96vp ExploitVendor Advisory

Track CVE-2025-64721 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2018-18748Sandboxie-plus sandboxie vulnerabilitySandboxie 5.26 allows a Sandbox Escape via an "import os" statement, followed by os.system("cmd") or os.system("powershell"), within a .py file. NOTE…EPSS 2.4%9.3CVE-2026-34458Sandboxie-plus sandboxie vulnerabilitySandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, an INI injection vulnerability allows …EPSS 0.29%8.8CVE-2026-34459Sandboxie-plus sandboxie stack-based buffer overflow vulnerabilitySandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, the SbieSvc proxy service's GetRawInpu…EPSS 0.15%8.8CVE-2026-34464Sandboxie-plus sandboxie stack-based buffer overflow vulnerabilitySandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, NamedPipeServer::OpenHandler copies th…EPSS 0.16%8.4CVE-2024-49360Sandboxie-plus sandboxie path traversal vulnerabilitySandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. An authenticated user (**UserA**) with no p…EPSS 0.49%8.2CVE-2026-32603Sandboxie-plus sandboxie improper input validation vulnerabilitySandboxie is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, a local denial of service vulnerability exi…EPSS 0.16%7.8CVE-2025-46715Sandboxie-plus sandboxie out-of-bounds write vulnerabilitySandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in version 1.3.0 and prior to vers…EPSS 0.23%7.8CVE-2025-46713Sandboxie-plus sandboxie classic buffer overflow vulnerabilitySandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in version 0.0.1 and prior to 1.15…EPSS 0.23%

Source: NIST National Vulnerability Database (record CVE-2025-64721), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.