CVE-2026-32603

Sandboxie is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, a local denial of service vulnerability exists in the Sandboxie kernel driver. An unprivileged process running inside a Standard Sandbox can send a malformed IOCTL to the \Device\SandboxieDriverApi driver, triggering an immediate kernel crash (BSOD). The vulnerability affects the Standard Sandbox configuration both with and without dropped administrator privileges, but does not affect the Security Hardened Sandbox configuration. This issue has been fixed in version 1.17.3. Users who cannot update can use the Security Hardened Sandbox configuration as a workaround.

• CWE-20

• https://github.com/sandboxie-plus/Sandboxie/releases/tag/v1.17.3Release Notes
• https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-vvf8-cf4j-v8fvExploit, Vendor Advisory
• https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-vvf8-cf4j-v8fvExploit, Vendor Advisory

Published

May 5, 2026

Last Modified

Jul 25, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-32596Glances is an open-source system cross-platform monitoring t…7.5
• CVE-2026-32597PyJWT is a JSON Web Token implementation in Python. Prior to…7.5
• CVE-2026-32598OneUptime is a solution for monitoring and managing online s…6.5
• CVE-2026-3260Rejected reason: The Undertow web server enforces a default …
• CVE-2026-32600xml-security is a library that implements XML signatures and…8.2
• CVE-2026-32602Homarr is an open-source dashboard. Prior to 1.57.0, the use…4.2
• CVE-2026-32604Spinnaker is an open source, multi-cloud continuous delivery…9.9
• CVE-2026-32605nimiq/core-rs-albatross is a Rust implementation of the Nimi…7.5
• CVE-2026-32606IncusOS is an immutable OS image dedicated to running Incus.…7.6
• CVE-2026-32607Discourse is an open-source discussion platform. From versio…5.4
• CVE-2026-32608Glances is an open-source system cross-platform monitoring t…7
• CVE-2026-32609Glances is an open-source system cross-platform monitoring t…7.5