PT-2025-22508 · Sandboxie · Sandboxie

Sgayou · Published 2025-05-22 · Updated 2025-05-22 · CVE-2025-46715

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sandboxie versions 1.3.0 through 1.15.12

Description The issue arises from the failure of Api GetSecureParam to sanitize incoming pointers, implicitly trusting the pointer passed by the user as safe to write to. GetRegValue then writes the contents of the SBIE registry entry selected to this address. An attacker can pass in a kernel pointer, and the driver dumps the registry key contents to it. This can be triggered by anyone on the system, including low integrity Windows processes.

Recommendations For versions prior to 1.15.12, update to version 1.15.12 to resolve the issue. As a temporary workaround, consider restricting access to the Api GetSecureParam function and GetRegValue until a patch is available. Avoid using the SBIE registry entry in the affected API endpoint until the issue is resolved.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2025-46715

GHSA-67P9-6H73-FF7X

Affected Products

Sandboxie

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/46xxx/CVE-2025-46715.json · Exploit
• https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-67p9-6h73-ff7x · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-46715 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-46715 · Security Note
• https://twitter.com/CVEnew/status/1925601155884736664 · Twitter Post
• https://t.me/latest_high_impact_cve/2444 · Telegram Post