What is CVE-2026-45313?

CVE-2026-45313 is a high-severity vulnerability in Sandboxie-plus Sandboxie, classified under Improper Access Control. CVSS score: 7.7/10. Published 2026-07-15.

How severe is CVE-2026-45313?

High severity. CVSS v3 base score is 7.7 out of 10.

Vulnerability in Sandboxie-plus Sandboxie

CVE-2026-45313

Sandboxie-Plus is an open source sandbox-based isolation software for Windows. Prior to 1.17.6, GuiServer::WndHookRegisterSlave in Sandboxie/core/svc/GuiServer.cpp stores attacker-supplied hthread and hproc fields from a GUI_WND_HOOK_REGIS…

CVSS v3 metric

CVSS v3 base score 7.7 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H.

Affected products

Sandboxie-plus Sandboxie — versions < 1.17.6

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2026-45313?: CVE-2026-45313 is a high-severity vulnerability in Sandboxie-plus Sandboxie, classified under Improper Access Control. CVSS score: 7.7/10. Published 2026-07-15.
How severe is CVE-2026-45313?: High severity. CVSS v3 base score is 7.7 out of 10.