CVE-2026-32603 Details
Description
Sandboxie is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, a local denial of service vulnerability exists in the Sandboxie kernel driver. An unprivileged process running inside a Standard Sandbox can send a malformed IOCTL to the \Device\SandboxieDriverApi driver, triggering an immediate kernel crash (BSOD). The vulnerability affects the Standard Sandbox configuration both with and without dropped administrator privileges, but does not affect the Security Hardened Sandbox configuration. This issue has been fixed in version 1.17.3. Users who cannot update can use the Security Hardened Sandbox configuration as a workaround.
A local denial-of-service vulnerability has been identified in the Sandboxie kernel driver, affecting versions through 1.17.2. The issue arises when an unprivileged process running inside a Standard Sandbox sends a malformed IOCTL to the SandboxieDriverApi driver. This action triggers an immediate kernel crash, causing a Blue Screen of Death (BSOD) on the host system. The vulnerability impacts the Standard Sandbox configuration, regardless of administrator privilege settings, but does not affect the Security Hardened Sandbox configuration.
Users are advised to update to Sandboxie-Plus version 1.17.3, which addresses this vulnerability. For those unable to update, switching to the Security Hardened Sandbox configuration can serve as a temporary workaround.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 6, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-vvf8-cf4j-v8fv | CISA-ADP | ExploitVendor Advisory |
| https://github.com/sandboxie-plus/Sandboxie/releases/tag/v1.17.3 | [email protected] | Release Notes |
| https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-vvf8-cf4j-v8fv | [email protected] | ExploitVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-20 | Improper Input Validation | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| sandboxie-plus sandboxie | < 1.17.3 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 25, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 7, 2026 | Initial Analysis | [email protected] |
| May 6, 2026 | CVE Modified | CISA-ADP |
| May 5, 2026 | New CVE Received | [email protected] |