Heap Overflow Vulnerability in Sandboxie Isolation Software by Sandboxie Plus

CVE-2025-64721

What is CVE-2025-64721?

The vulnerability in Sandboxie affects versions 1.16.6 and earlier, where the SYSTEM-level service SbieSvc.exe improperly handles user-controlled values in the SbieIniServer::RC4Crypt method. This oversight allows sandboxed processes to create a heap overflow by manipulating buffer sizes, thereby executing arbitrary code at the SYSTEM level. This serious flaw compromises the security of the host system, allowing attackers to bypass the isolation that the software is intended to provide. The issue has been remediated in version 1.16.7.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

News Articles

The Hacker News

CVE-2025-64721

ThreatsDay Bulletin: Codespaces RCE, AsyncRAT C2, BYOVD Abuse, AI Cloud Intrusions & 15+ Stories

ThreatsDay Bulletin: Key cyber updates on ransomware, cloud intrusions, phishing, botnets, supply-chain risks, and nation-state threat activity.

2 days ago

References