Sandboxie Escape Flaw Could Let Attackers Gain SYSTEM-Level Privileges

Security researchers disclosed multiple critical vulnerabilities in Sandboxie and Sandboxie-Plus that allow sandbox escapes and SYSTEM-level privilege escalation (notably a stack-based buffer overflow in SbieSvc), configuration-file injection permitting elevation, a driver-triggered kernel crash (BSOD), and a weakened password hashing implementation; maintainers released patches in versions 1.17.3 through 1.17.5 and users are urged to upgrade immediately.