CVE-2026-45313

Name of the Vulnerable Software and Affected Versions Sandboxie-Plus versions prior to 1.17.6

Description An issue exists where GuiServer::WndHookRegisterSlave in Sandboxie/core/svc/GuiServer.cpp stores hthread and hproc fields from a GUI WND HOOK REGISTER request without validating if the thread belongs to the sandboxed process or if the function pointer is in the caller address space. Subsequently, GuiServer::WndHookNotifySlave calls OpenThread() and QueueUserAPC() as SYSTEM, which allows a sandboxed process to execute arbitrary code in an unsandboxed host process.

Recommendations Update Sandboxie-Plus to version 1.17.6.