CVE-2025-46714
High
Description
Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in version 1.3.0 and prior to 1.15.12, API_GET_SECURE_PARAM has an arithmetic overflow leading to a small memory allocation and then a extremely large copy into the small allocation. Version 1.15.12 fixes the issue.
SeverityHigh
CVSS7.8
Exploit probability16. percentile0.2%
ProductSandboxie
PublishedMay 22, 2025
First seenMay 22, 2025
Weakness typeCWE-120CWE-120
How to fix
Update
- sandboxie-plus sandboxie1.15.12 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sandboxie-plus sandboxie | 1.3.0 ≤ v < 1.15.12 | 1.15.12 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.