CNNVD-202601-1924 Information
Jan 13, 2026
cve
CNNVD ID
CNNVD-202601-1924
Related CVE
- CNNVD Published: 2026-01-13
Description (Chinese)
Sandboxie-Plus是Sandboxie-Plus公司的一款沙盒隔离软件。 Sandboxie-Plus 5.50.2版本存在代码问题漏洞,该漏洞源于Windows服务SbieSvc存在未加引号的服务路径,可能导致本地攻击者执行任意代码。
Description (English)
Sandboxie-Plus is a sandbox isolation software for Sandboxie-Plus. There is a code gap in the Sandboxie-Plus 5.502 version, which stems from the existence of unquoted service paths in the Windows service, SbieSvc, which could lead local attackers to enforce random codes.
Hazard Level
Medium
Vulnerability Type
代码问题
Affected Vendor
sandboxie-plus
Published
2026-01-13
Last Modified
2026-02-24
References
https://sandboxie-plus.com/ https://www.exploit-db.com/exploits/50819 https://www.vulncheck.com/advisories/sandboxie-plus-service-sbiesvc-unquoted-service-path
Share on: