CVE-2026-32603
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
Sandboxie versions 1.17.2 and earlier contain a local denial of service vulnerability in the kernel driver. An unprivileged process in a Standard Sandbox can send a malformed IOCTL to the \Device\SandboxieDriverApi driver, causing an immediate kernel crash (BSOD). The vulnerability affects Standard Sandbox configuration but not Security Hardened Sandbox. Fixed in version 1.17.3.
Risk Assessment
Risk of local denial of service (BSOD) by an unprivileged user in the Standard Sandbox.
Recommendation
Update Sandboxie to version 1.17.3 or later. As a workaround, use the Security Hardened Sandbox configuration.
Original NVD description (English source)
Sandboxie is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, a local denial of service vulnerability exists in the Sandboxie kernel driver. An unprivileged process running inside a Standard Sandbox can send a malformed IOCTL to the \Device\SandboxieDriverApi driver, triggering an immediate kernel crash (BSOD). The vulnerability affects the Standard Sandbox configuration both with and without dropped administrator privileges, but does not affect the Security Hardened Sandbox configuration. This issue has been fixed in version 1.17.3. Users who cannot update can use the Security Hardened Sandbox configuration as a workaround.