CNNVD-202601-3376 Information
Jan 21, 2026
cve
CNNVD ID
CNNVD-202601-3376
Related CVE
- CNNVD Published: 2026-01-21
Description (Chinese)
Sandboxie Plus是Sandboxie Plus开源的一个Windows沙盒隔离工具。 Sandboxie Plus 0.7.2版本存在代码问题漏洞，该漏洞源于SbieSvc服务中存在未加引号的服务路径，可能导致本地攻击者以提升的权限执行代码。
Description (English)
Sandboxie Plus is a Windows sandbox isolation tool for Sandboxe Plus open source. The code gap in version 0.7.2 of Sandboxie Plus stems from the existence of unquoted service paths in the SbieSvc service, which may result in local assailants using enhanced permission enforcement codes.
Hazard Level
Medium
Vulnerability Type
代码问题
Affected Vendor
Sandboxie Plus
Published
2026-01-21
Last Modified
2026-02-24
References
https://sandboxie-plus.com/ https://www.exploit-db.com/exploits/49631 https://www.vulncheck.com/advisories/sandboxie-plus-sbiesvc-unquoted-service-path
Share on: