CVE-2025-46715: sandboxie-plus sandboxie

csirt@kutim:~/threat-intel/cve/CVE-2025-46715

CVSS 7.8 · High EPSS 0,23%

Kerentanan Out-of-bounds Write pada sandboxie-plus sandboxie. Skor CVSS 3.1 7.8 (High) menurut github.com.

Deskripsi (NVD)

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in version 1.3.0 and prior to version 1.15.12, Api_GetSecureParam fails to sanitize incoming pointers, and implicitly trusts that the pointer the user has passed in is safe to write to. GetRegValue then writes the contents of the SBIE registry entry selected to this address. An attacker can pass in a kernel pointer and the driver dumps the registry key contents we requested to it. This can be triggered by anyone on the system, including low integrity windows processes. Version 1.15.12 fixes the issue.

Rincian

Terbit di NVD: 22 Mei 2025
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 7.8 (High), sumber github.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-787: Out-of-bounds Write
EPSS (30 hari): 0,23% peluang dieksploitasi; lebih tinggi dari 13,2% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
sandboxie-plus	sandboxie	Versi 1.3.0 hingga sebelum 1.15.12

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-67p9-6h73-ff7x exploit · advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.