PT-2025-22508 · Sandboxie · Sandboxie

Sgayou · Publicado 2025-05-22 · Atualizado 2025-05-22 · CVE-2025-46715

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sandboxie versions 1.3.0 through 1.15.12

Description The issue arises from the failure of Api GetSecureParam to sanitize incoming pointers, implicitly trusting the pointer passed by the user as safe to write to. GetRegValue then writes the contents of the SBIE registry entry selected to this address. An attacker can pass in a kernel pointer, and the driver dumps the registry key contents to it. This can be triggered by anyone on the system, including low integrity Windows processes.

Recommendations For versions prior to 1.15.12, update to version 1.15.12 to resolve the issue. As a temporary workaround, consider restricting access to the Api GetSecureParam function and GetRegValue until a patch is available. Avoid using the SBIE registry entry in the affected API endpoint until the issue is resolved.

Exploit

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2025-46715

GHSA-67P9-6H73-FF7X

Produtos afetados

Sandboxie

Referências · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/46xxx/CVE-2025-46715.json · Exploit
• https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-67p9-6h73-ff7x · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2025-46715 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-46715 · Nota de Segurança
• https://twitter.com/CVEnew/status/1925601155884736664 · Publicação no Twitter
• https://t.me/latest_high_impact_cve/2444 · Publicação no Telegram