Sandboxie Plus (open source fork of Sandboxie)

[harlan4096]

Release v1.17.3 / 5.72.3 Latest​

Sandboxie-Plus 1.17.3 / 5.72.3 introduces a range of improvements to the user interface, tray integration, and sandbox usability, while also addressing several important security issues that make this update particularly important to install promptly.

A major focus of this release is security hardening. Several vulnerabilities reported by external researchers have been resolved, including a local denial-of-service issue that could be triggered by a sandboxed process (CVE-2026-32603) as well as a bypass of the EditAdminOnly configuration protection through INI CRLF injection. Additional fixes address weaknesses in ProcessServer name validation and NamedPipeServer parameter validation, further strengthening the robustness of Sandboxie-Plus’ service-side interfaces. An issue affecting the integrity verification of the built-in updater has also been corrected, ensuring that update files are validated reliably.

Another security-relevant correction concerns the EditPassword mechanism. Previously, password hashes suffered from reduced entropy, potentially weakening protection. Newly set passwords are now stored as salted SHA-256 hashes encoded in Base64. Users should note that this improvement only applies when the password is set or changed; existing stored hashes remain in the older weaker format until the password is updated.

Beyond these security fixes, the release also resolves a number of stability and correctness issues across the codebase. These include improvements to registry handling under WOW64 that ensure the correct inheritance of 32-bit and 64-bit registry views, fixes for handle leaks in the Start Menu scanning code, and corrections to several validation and parsing routines that could previously lead to inconsistent behavior. Additional bug fixes address crashes, configuration persistence problems, and various edge cases reported by users and contributors.

On the usability side, the release introduces configurable window placement controls that allow users to specify on which monitor Sandboxie interface windows open, including main, recovery, and notification dialogs, with a configurable fallback mode. A new “Label only” border mode has been added that hides the colored frame and displays only the sandbox name label, providing a cleaner visual indicator for boxed applications. The border rendering system also gained options for controlling label width and preventing labels from being clipped by the taskbar, as well as a capture-exclusion feature that prevents sandbox borders and labels from appearing in screenshots or screen recordings.

System tray behavior has been significantly enhanced with new customization options. Users can now control whether sandbox icons appear in tray menus, display sandbox aliases instead of internal box names, and configure when sandbox status tooltips are shown. Overlay icons indicating sandbox state—such as mounted disk images, RAM disks, or auto-delete status—can also be displayed directly in the tray list. Tray and submenu performance has been improved through more efficient icon caching and reduced repeated icon extraction.

Performance improvements extend to the SandMan GUI itself. Several internal caching changes reduce unnecessary icon loading and repeated system queries, lowering constant CPU usage in the interface. Network connectivity checks used by the updater have been throttled and cached to avoid unnecessary system registry queries and network attempts when the system is offline.

Additional improvements include a Windows 11 MIDI compatibility template contributed by the community, improved sandbox duplication behavior that preserves aliases and group assignments correctly, and refinements to sandbox border rendering and tray list scaling at high DPI.

Because this release fixes multiple security issues affecting both the service interface and configuration protection mechanisms, all users are strongly advised to update to Sandboxie-Plus 1.17.3 / 5.72.3 as soon as possible.

For a full list of changes please review the change log.

You can support the project through donations, any help will be greatly appreciated

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

https://github.com/sandboxie-plus/Sandbo...ag/v1.17.3