Sandboxie Plus (open source fork of Sandboxie)

[harlan4096]

Release v1.16.5 / 5.71.5 Latest

Sandboxie-Plus 1.16.5 introduces a range of refinements and fixes aimed at improving both usability and stability across the board. One of the most notable improvements is the enhanced INI Editor, which now offers a much more capable “Edit INI Section” dialog, making configuration editing more intuitive and efficient. Custom box colors are now preserved even when changing the Box Type Preset, ensuring that user-defined visual customization remains consistent. The sandbox border settings have also been expanded with support for alpha transparency, giving users finer control over the appearance of sandbox indicators.

The context menu icons have been refreshed for a cleaner, more modern look, and the default toolbar configuration has been refined for better usability. Under the hood, the Win32 system call handling has seen an experimental improvement: when UseWin32kFilterTable=y is enabled, the driver will now make use of the KeServiceDescriptorTableFilter instead of KeServiceDescriptorTableShadow where appropriate, providing more accurate and secure filtering behavior.

This release also resolves several technical issues. The reliability of the BindAdapter feature has been improved when a VPN or bound adapter becomes disconnected. A long-standing issue involving registry handling was fixed where a WOW6432Node subkey could incorrectly become HKLM\SOFTWARE\WOW6432Node\WOW6432Node. Additionally, a security-related issue was addressed where programs started with their 8.3 filenames were not properly identified as forced or blocked programs.

Overall, version 1.16.5 refines the user experience, enhances customization and system integration, and delivers improved robustness in key areas of the Sandboxie-Plus platform.

For a full list of changes please review the change log.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

https://github.com/sandboxie-plus/Sandbo...ag/v1.16.5

[harlan4096]

Release v1.16.6 / 5.71.6 Latest

This release delivers several important fixes and a key compatibility improvement to enhance the overall reliability and user experience of Sandboxie-Plus. A issue affecting Windows 7 users introduced in 1.16.5 has been resolved, ensuring that the program can once again establish a proper connection to the driver on this platform. Compatibility with recent Firefox Nightly builds (version 146) has also been addressed, allowing the browser to run correctly within the sandbox environment. This version also introduces a change to the default configuration: the UseWin32kHooks=y option is now enabled by default for all sandboxed processes. This adjustment significantly improves compatibility with Electron-based applications, reducing issues that some users previously experienced.

Overall, Sandboxie-Plus 1.16.6 / 5.71.6 continues the effort to refine system compatibility, stability, and performance across both legacy and modern Windows systems.

For a full list of changes please review the change log.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

https://github.com/sandboxie-plus/Sandbo...ag/v1.16.6

[harlan4096]

Release v1.16.7 / 5.71.7 Latest​

This release of Sandboxie-Plus introduces a small but useful enhancement and several important refinements. A new checkbox for the “NoRestartOnPCA=y” setting has been added to the box options, giving users direct control without manual editing. The default value for “UseWin32kHooks” has been reverted from “y” back to “n” after it was found to cause compatibility issues with certain applications. Additionally, named syscall invocation under WoW64 has been improved to ensure more robust operation in mixed-architecture scenarios.

A significant focus of this update is stability, with several critical fixes in both user-mode and driver-level components. The “OpenWndStation=y” option now works correctly again when used together with “SandboxieAllGroup=y”.

Most importantly, this update includes fixes that directly affect the driver’s stability. A flaw that could lead to incorrect driver responses during certificate parsing and driver-info queries has been resolved, and a potential handle leak in SbieDll.dll involving SbieApi_DeviceHandle has been fixed as documented in issue #5097. These corrections eliminate scenarios that, under certain conditions, could have contributed to resource exhaustion or triggered system instability, reducing the risk of potential BSODs and improving overall reliability of the sandboxie.

For a full list of changes please review the change log.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

https://github.com/sandboxie-plus/Sandbo...ag/v1.16.7

[harlan4096]

Release v1.16.8 / 5.71.8 Latest

​This update of Sandboxie-Plus enhances usability across the file panel and configuration interface. The file panel now supports an integrated search and filter function, which can be opened using Ctrl + F, allowing users to quickly locate items within large folder views. Additionally, a dedicated user interface option has been introduced for the ProtectAdminOnly=y/n setting, making this security configuration accessible without manual INI edits.

The release also addresses an issue in the 32-bit SbieDll.dll where SbieApi_QueryDrvInfo could trigger an incorrect certificate warning. This problem has been fully resolved to ensure accurate driver state reporting and eliminate unnecessary alerts.

For a full list of changes please review the change log.

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

https://github.com/sandboxie-plus/Sandbo...ag/v1.16.8

[harlan4096]

Release v1.16.9 / 5.71.9 Latest​

This release of Sandboxie Plus focuses on stability, compatibility, and overall robustness across a wide range of real-world use cases. Several long-standing and high-impact issues have been resolved, particularly affecting popular applications such as web browsers, email clients, and Microsoft Office, resulting in a smoother and more reliable sandboxing experience.

Application compatibility has been significantly improved. Issues affecting recent versions of Thunderbird have been fixed, Firefox no longer triggers AppModel-Runtime errors in the Windows Event Viewer when run inside a sandbox, and Tor Browser is now stable even when operated at the highest security level. Problems specific to portable and sandboxed browser scenarios were also addressed, including a long-standing issue where Chrome Portable tooltips could become stuck.

System-level stability has been strengthened as well. A critical blue-screen crash in the Sandboxie driver under high GPU process creation load on Windows Server 2022 has been resolved, and crashes that prevented Microsoft Word from functioning correctly due to failures in OfficeClickToRun.exe have been fixed. In addition, Sandboxie now handles software lifecycle operations more efficiently, eliminating prolonged delays when uninstalling or removing applications that were installed exclusively within a sandbox.

Overall, this release prioritizes reliability and correctness in high-security and high-load environments, making Sandboxie Plus safer and more dependable for everyday use as well as professional and server-side deployments.

For a full list of changes please review the [b]change log.[/b]

You can support the project through donations, any help will be greatly appreciated.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

https://github.com/sandboxie-plus/Sandbo...ag/v1.16.9

[harlan4096]

Sandboxie 1.17.0 / 5.72.0:

Sandboxie-Plus 1.17.0 delivers significantly improved compatibility for UWP applications and App Compartment boxes, alongside usability enhancements and important stability fixes.

This version substantially improves the experimental UWP support across multiple layers of the architecture. A failure to mount the registry when launching UWP applications inside a sandbox has been resolved, restoring reliable startup behavior for modern Windows apps. Token handling has been refined to eliminate incompatibilities with the UWP security model, CopyTokenAttributes=y is now automatically applied to ensure correct attribute propagation required by UWP processes. To provide consistent behavior, SandboxieAllGroup=y is now the default, effectively standardizing the UseCreateToken=y code path, reducing dependency on undocumented kernel functions.

IPC handling in App Compartment type boxes has been further improved to increase reliability and compatibility with App Container based isolation. This fixes Microsoft Edge 144 crashes in Application Compartment Boxes. Furthermore, a new UseAlternateIpcNaming=y mode replaces the use of a separate NT object namespace by appending a suffix to sandboxed object names, instead of using an entirely separated object directory structure. This mode is restricted to App Compartment boxes, as for regular box types the object paths would otherwise be blocked by the driver.

User-facing transparency and workflow have been enhanced. Sandboxed windows now display the sandbox name directly in the border, and a new border mode ensures that the border is shown for every window belonging to sandboxed processes, not only the one currently in focus. Sandboxie service applications now include dedicated icons for clearer identification.

Isolation control has been extended, a new global option, ForceBoxDocs=y, allows administrators to force any program opening a file from a boxed path to start inside the corresponding sandbox, strengthening document-origin enforcement.

The SandMan UI can now export and import multiple sandboxes in a single operation, simplifying migration and backup procedures. Configuration handling has been improved as well, RenameSection processing now preserves original comments and section order, ensuring configuration files remain structurally clean and maintainable after modifications.

Several additional stability issues have been addressed. The CryptUnprotectData hook no longer returns an incorrect data description string. A handle leak in SbieDll.dll has been eliminated. Switching sandbox sorting in the user interface now behaves correctly. A crash in the file search bar triggered by performing multiple searches within a sandbox has also been resolved.

Overall, this release delivers materially improved UWP and App Compartment reliability, refined token handling semantics, updated Windows compatibility data, and a range of quality-of-life and stability enhancements.

For a full list of changes please review the change log.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

https://github.com/sandboxie-plus/Sandbo...ag/v1.17.0

[harlan4096]

Release v1.17.3 / 5.72.3 Latest​

Sandboxie-Plus 1.17.3 / 5.72.3 introduces a range of improvements to the user interface, tray integration, and sandbox usability, while also addressing several important security issues that make this update particularly important to install promptly.

A major focus of this release is security hardening. Several vulnerabilities reported by external researchers have been resolved, including a local denial-of-service issue that could be triggered by a sandboxed process (CVE-2026-32603) as well as a bypass of the EditAdminOnly configuration protection through INI CRLF injection. Additional fixes address weaknesses in ProcessServer name validation and NamedPipeServer parameter validation, further strengthening the robustness of Sandboxie-Plus’ service-side interfaces. An issue affecting the integrity verification of the built-in updater has also been corrected, ensuring that update files are validated reliably.

Another security-relevant correction concerns the EditPassword mechanism. Previously, password hashes suffered from reduced entropy, potentially weakening protection. Newly set passwords are now stored as salted SHA-256 hashes encoded in Base64. Users should note that this improvement only applies when the password is set or changed; existing stored hashes remain in the older weaker format until the password is updated.

Beyond these security fixes, the release also resolves a number of stability and correctness issues across the codebase. These include improvements to registry handling under WOW64 that ensure the correct inheritance of 32-bit and 64-bit registry views, fixes for handle leaks in the Start Menu scanning code, and corrections to several validation and parsing routines that could previously lead to inconsistent behavior. Additional bug fixes address crashes, configuration persistence problems, and various edge cases reported by users and contributors.

On the usability side, the release introduces configurable window placement controls that allow users to specify on which monitor Sandboxie interface windows open, including main, recovery, and notification dialogs, with a configurable fallback mode. A new “Label only” border mode has been added that hides the colored frame and displays only the sandbox name label, providing a cleaner visual indicator for boxed applications. The border rendering system also gained options for controlling label width and preventing labels from being clipped by the taskbar, as well as a capture-exclusion feature that prevents sandbox borders and labels from appearing in screenshots or screen recordings.

System tray behavior has been significantly enhanced with new customization options. Users can now control whether sandbox icons appear in tray menus, display sandbox aliases instead of internal box names, and configure when sandbox status tooltips are shown. Overlay icons indicating sandbox state—such as mounted disk images, RAM disks, or auto-delete status—can also be displayed directly in the tray list. Tray and submenu performance has been improved through more efficient icon caching and reduced repeated icon extraction.

Performance improvements extend to the SandMan GUI itself. Several internal caching changes reduce unnecessary icon loading and repeated system queries, lowering constant CPU usage in the interface. Network connectivity checks used by the updater have been throttled and cached to avoid unnecessary system registry queries and network attempts when the system is offline.

Additional improvements include a Windows 11 MIDI compatibility template contributed by the community, improved sandbox duplication behavior that preserves aliases and group assignments correctly, and refinements to sandbox border rendering and tray list scaling at high DPI.

Because this release fixes multiple security issues affecting both the service interface and configuration protection mechanisms, all users are strongly advised to update to Sandboxie-Plus 1.17.3 / 5.72.3 as soon as possible.

For a full list of changes please review the change log.

You can support the project through donations, any help will be greatly appreciated

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

https://github.com/sandboxie-plus/Sandbo...ag/v1.17.3