CVE Details
Basic Information
| Title |
CVE-2025-46715 |
| Type |
cve |
| Published |
2025-05-22T17:15:24 |
| Last Seen |
2025-05-22T17:22:45 |
CVSS Information
| Base Score |
7.8 (HIGH) |
| Attack Vector |
LOCAL |
| Attack Complexity |
LOW |
| Privileges Required |
LOW |
| User Interaction |
NONE |
| Scope |
UNCHANGED |
| Confidentiality Impact |
HIGH |
| Integrity Impact |
HIGH |
| Availability Impact |
HIGH |
AI Analysis
| AI Description |
A vulnerability in Sandboxie’s Api_GetSecureParam function allows arbitrary code execution due to improper pointer sanitization. This issue affects versions 1.3.0 to 1.15.11 and is critical due to the potential for attackers to exploit it without user interaction. |
| AI Severity |
Critical |
| Vendor |
Sophos |
| Product |
Sandboxie |
| Affected Version |
1.3.0, 1.15.11 |
Additional Information
| CVE List |
CVE-2025-46715 |
| CWE List |
CWE-787 |
| Bulletin Family |
cve |
Description
Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in version 1.3.0 and prior to version 1.15.12, Api_GetSecureParam fails to sanitize incoming pointers, and implicitly trusts…
CVSS Score Summary
Base Score: %!f(string=#) (HIGH)
View Full CVE Details
