CVE-2026-34459

Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, the SbieSvc proxy service's GetRawInputDeviceInfoSlave handler contains two vulnerabilities that can be chained for sandbox escape. First, when a sandboxed process sends an IPC request with cbSize set to 0, up to 32KB of uninitialized stack memory from the service process is returned, leaking return addresses and stack cookies which bypass ASLR and /GS protections. Second, the handler performs a memcpy with an attacker-controlled length without verifying it fits within the 32KB stack buffer, enabling a stack buffer overflow. By chaining the information leak with the overflow, a sandboxed process can execute a ROP chain to achieve SYSTEM privilege escalation, even from a Security Hardened Sandbox. Hardware-enforced shadow stacks (Intel CET) prevent the ROP chain execution but do not mitigate the information leak. This issue has been fixed in version 1.17.3.

• CWE-121

• https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-7cpc-5hv7-rfmhExploit, Mitigation, Vendor Advisory
• https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-7cpc-5hv7-rfmhExploit, Mitigation, Vendor Advisory

Published

May 5, 2026

Last Modified

Jul 24, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-34453SiYuan is a personal knowledge management system. Prior to v…7.5
• CVE-2026-34454OAuth2 Proxy is a reverse proxy that provides authentication…3.5
• CVE-2026-34455Hi.Events is an open-source event management and ticket sell…8.8
• CVE-2026-34456Reviactyl is an open-source game server management panel bui…9.8
• CVE-2026-34457OAuth2 Proxy is a reverse proxy that provides authentication…9.1
• CVE-2026-34458Sandboxie-Plus is an open source sandbox-based isolation sof…8.8
• CVE-2026-3446When calling base64.b64decode() or related functions the dec…6
• CVE-2026-34460NamelessMC is website software for Minecraft servers. In ver…5.4
• CVE-2026-34461Sandboxie-Plus is an open source sandbox-based isolation sof…7.8
• CVE-2026-34462Sandboxie-Plus is an open source sandbox-based isolation sof…7.8
• CVE-2026-34463Mantis Bug Tracker (MantisBT) is an open source issue tracke…8.6
• CVE-2026-34464Sandboxie-Plus is an open source sandbox-based isolation sof…8.8