Sandboxie Plus (open source fork of Sandboxie)

[Kool]

Sandboxie 1.15.8 / 5.70.8

Release Notes

 
Sandboxie-Plus v1.15.8 / Classic v5.70.8 introduces several improvements and fixes to enhance usability and stability. The sandbox deletion confirmation prompt has been refined for better clarity. The online updater has been updated to ensure smoother updates, and the Plus installer now includes the ImDisk 3.0 driver for 64-bit systems, expanding its functionality.
This release also addresses key issues reported by users. A problem where the "WriteFilePath" setting was not functioning correctly has been resolved, ensuring expected behavior when writing files. Additionally, an issue with Box Notes that caused matching lines to be deleted upon saving has been fixed, restoring proper note-taking functionality.

https://github.com/sandboxie-plus/Sandboxie/releases

[harlan4096]

Sandboxie Plus 1.15.9 delivers a robust update centered on security, stability, and compatibility—particularly for users of modern web browsers and those prioritizing privacy and sandbox integrity.

A key highlight is the improved compatibility with Firefox 137 Nightly and later, resolving previous hooking issues that caused instability or functional limitations. Firefox now runs smoothly within sandboxed environments once again.

Security enhancements are another major focus. This release addresses a potential IP leakage vulnerability affecting dual-stack IPv4/IPv6 setups when only one proxy type was configured. Connections now fail gracefully if no proxy is set for the relevant IP type, effectively preventing unintentional bypasses and preserving user anonymity—a critical improvement for users relying on VPNs or proxies.

Additionally, a serious local privilege escalation vulnerability tied to the HostInjectDll mechanism has been patched, thanks to responsible disclosure. This fix strengthens Sandboxie's role as a secure execution layer.

For advanced users, a new debug option OpenAllSysCalls=y has been added, allowing unrestricted system call access for testing purposes. However, due to its permissive nature, it should be used with caution.

Among the usability improvements, users can now duplicate sandboxes and their contents directly from the UI, streamlining environment management. The update also introduces a new developer certificate type that disables user-mode component verification for advanced use cases. This node-locked certificate is available at no additional cost to existing Contributor or Eternal/Huge certificate holders upon request.

Overall, version 1.15.9 brings a thoughtful balance of new features, critical fixes, and user-focused enhancements, reinforcing Sandboxie Plus as a powerful tool for secure application isolation.

For a full list of changes please review the change log.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

https://github.com/sandboxie-plus/Sandbo...ag/v1.15.9

[Kool]

Release v1.15.10 / 5.70.10

Added

• added 'BindAdapterIP=192.168.100.123' and/or 'BindAdapterIP=::ffff:c0a8:647b' to force sandboxed programs to use a defined host IP
  • Note: if the IP is not bound to one of the hosts NICs the connections will fail
    
  • the configuration can be set per process like 'BindAdapterIP=program.exe,192.168.100.123', but only in the INI, not in the UI
    

Changed

• greatly improved handling of Patreon certificates
  
• improved certificate tab; serial entry is now always visible, and the certificate text edit as well, though it does not show the critical information UPDATE_KEY/SIGNATURE, instead only ... when mouse clicked the full data gets displayed
  
• streamlined application of new certificates
  

Fixed

• fixed Firefox 137.0 generates SBIE2328 notifications in Sandboxie Plus v1.15.9 #4652 #4652 #4640
  
• fixed SbieShellExt.dll missing in 1.15.9
  
• fixed Process_GetCommandLine causing memory leak #4658
  
• fixed Thunderbird 102.15.1 does not load all extensions under Sandboxie Plus v1.15.9 #4653
  
• fixed in Sandboxie, invoke SetParent change window to message-only window failed #4656
  
• fixed issue with Unicode names when retrieving an evaluation certificate
  
• fixed should the delete content message box always on top? #4673
  

https://github.com/sandboxie-plus/Sandbo...2025-04-15

[Kool]

Release v1.15.11 / 5.70.11

 
Fixed

• fixed issue with SboxHostDll.dll failing to be injected into OfficeClickToRun.exe
  

https://github.com/sandboxie-plus/Sandbo...2025-04-16

[harlan4096]

Sandboxie Plus version 1.15.12 / 5.70.12 introduces a range of enhancements, fixes, and usability improvements. This release adds Indonesian language support to the Plus UI, a new template for the WeType Input Method Editor (IME), and support for proxy configuration using host names instead of raw IPs by resolving them at WSA_Startup. Sandboxie can now bind to network adapters rather than specific IP addresses, providing more flexibility in networking setups. Additionally, support for the %ProgramFiles(x86)% environment variable has been introduced, along with a new TemplateDefaultFolders entry to define standard paths in privacy-enhanced boxes.

Several changes improve usability and performance. The "Move Sandbox" list sorting behavior has been refined, and personal details like name and hardware ID in the Support tab are now hidden by default. An experimental alternative proxy relay implementation has also been added, shifting from socket modification to relay threads.

Numerous issues have been addressed. These include the BoxAlias not appearing in the "run in box" dialog, UI inconsistencies after using Ctrl+F, and persistent high I/O usage by SbieCtrl.exe and SandMan.exe. Registry access functions were hardened with additional checks, and problems with Tencent TIM, MSI installer behavior, and oversized Sandboxie.ini files have been resolved. Other fixes address UI glitches, translation inconsistencies, drag-and-drop issues, and crashes related to SbieDll.dll. Compatibility problems with PingInfoView and a loop condition in CollectProducts() have also been fixed.

For a full list of changes please review the change log.

Download: https://github.com/sandboxie-plus/Sandbo...g/v1.15.12

[Kool]

Sandboxie Release v1.16.0 / 5.71.0

Changelog

 
Added

• added option to copy HwID from the support page
  
• added 'MarkOfTheWebBox=BoxName' option to force all files with the Mark of The Web set into a preset sandbox
  
• added wildcard support with ForceProcess #2603
  
• added support for proper text scaling in the 'Type' dropdown on the Trace Log page to prevent truncation when display scaling is applied #4812 (thanks wzxjohn)
  
• added missing virtualization to EventPair and KeyedEvent objects
  
• added filtering and virtualization to Timer objects
  
• added option to create virtual sandboxes (not stored in Sandboxie.ini)
  
• added option 'UseSandboxieUAC=y' to use Sandboxie's own UAC stand-in prompt instead of the system default one
  • Note: the new UAC prompt offers also the option to grant only fake admin privileges to the application
    

Changed

• refactored DNS Filter logic to enable filtering even when no DNS resolution occurs or when no valid IP address is returned #4811 (thanks wzxjohn)
  • previously, DNS Filter only applied if a DNS request was made and a valid response (e.g. IP address) was received
    
  • this caused issues such as failed modifications for unresolved domains and potential information leakage due to DNS requests during filtering
    
• enabled /GS for all components
  
• enabled /CETCOMPAT for the driver
  
• reworked INI handling #4492
  • added 'ImportBox=C:\path\To\Box.ini'
    
  • added mechanism to create virtual config section in the driver without the need for an INI file
    
• improved Move Sandbox menu #4819
  

Fixed

• fixed taskbar remains visible at the top when entering full screen in Firefox 138+ #4761
  
• fixed redundant options in multiple delete content #4817
  
• fixed Sandboxie Plus closes unexpectedly
  
• fixed Page display abnormality #4810
  
• fixed working directory when running program from context menu on Windows 11 #4844 (thanks micbou)
  

Download  https://github.com/sandboxie-plus/Sandbo...ag/v1.16.0

[Kool]

Sandboxie Release Release v1.16.1 / 5.71.1

 
Changed

• updated toolset to MSVC_2022 as the GitHub CI runner 2019 is being discontinued
  • Note: this drops Windows 7 and 32-bit OS support as the 2022 toolset no longer supports these targets for driver build
    
• switching to Qt6 which also does not support Windows 7
  

Fixed

• fixed incomplete directory in links when creating shortcuts #4882
  
• fixed BindAdapter doesn't work, can still access internet when bound adapter (VPN) is disabled #4896
  
• fixed there's a strange problem when calling GetFullPathName() with a string starting with a (back)slash #4867
  
• fixed some of the UI bound with the install language ID #4859
  
• fixed bad UAC prompt layout #4863
  
• fixed "Run Un-Sandboxed" option ignored when Mark of The Web forcing is enabled #4856
  

Download : https://github.com/sandboxie-plus/Sandbo...ag/v1.16.1

[harlan4096]

Release v1.16.2 / 5.71.2 [b]Latest[/b]

The final release of Sandboxie-Plus version 1.16.2 / 5.71.2 consolidates and builds upon the significant advancements introduced in the recent pre-releases, delivering a more secure, compatible, and modernized sandboxing experience.

This version marks a major step forward in platform modernization. The underlying codebase has been updated to the MSVC 2022 toolset, while the user interface has migrated from Qt 5 to Qt 6. These changes provide better performance, improved security, and access to newer development features. However, they also necessitate the discontinuation of support for Windows 7 and 32-bit systems. Depending on user interest, an Extended Support Release (ESR) for older systems may be considered.

The update further refines usability and functionality. A new INI key validation feature, complete with per-key tooltips, has been integrated into the INI section editor, making advanced configuration safer and more accessible. SandMan now also supports an optional Windows 11-style visual theme, enhancing UI consistency on modern systems.

A major new feature allows administrators to redirect all files marked with the "Mark of the Web" into a designated sandbox, improving security by isolating potentially unsafe downloads. Forced process rules now support wildcards, and virtual sandboxes can be created without being written into the main configuration file, ideal for temporary or dynamically managed setups.

Under the hood, the DNS filter logic has been hardened to prevent unresolved domains from bypassing filtering, addressing a potential security flaw.

Additional improvements to system object handling now cover EventPair, KeyedEvent, and Timer types, enhancing compatibility with more applications.

The UAC subsystem can now invoke Sandboxie's own prompt, capable of simulating administrative rights without actual elevation, for more secure testing scenarios.

This release also addresses a range of bugs. Issues with incomplete shortcut paths, broken network adapter isolation, misinterpreted backslash-prefixed file paths, and language mismatches during installation have been resolved. The UAC prompt layout has been visually refined, and a long-standing fullscreen issue with Firefox’s taskbar behavior has been fixed. Moreover, Firefox compatibility has been improved for both stable and Nightly builds, resolving recent hook-related failures. An important security issue involving sandbox key leaks during encrypted volume password changes has also been mitigated by backporting hardened logic from MajorPrivacy.

Together, these changes offer a more future-proof, stable, and secure experience for Sandboxie-Plus users.

For a full list of changes please review the change log.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

Release v1.16.2 / 5.71.2 · sandboxie-plus/Sandboxie