Wingetlywingetly
← All apps

busybox-w32

by frippery.orgv1.38.0-FRP-5579-g5749feb35

Last updated

BusyBox is a single binary that contains many common Unix tools

Install with winget

$ winget install --id frippery.busybox-w32 --exact --version 1.38.0-FRP-5579-g5749feb35

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Built by Pckgr

For Intune admins

Stop chasing app updates. Pckgr patches them for you.

Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.

Start free 30-day trial

No credit card required.

Installers · v1.38.0-FRP-5579-g5749feb35

ArchitectureTypeScopeInstallDownload
x86Portable-Direct
x64Portable-Direct
arm64Portable-Direct

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

25 known CVEs via NVD

  • low2.9Patched in wingetCVE-2026-38755affects v1.38.0Jul 15, 2026

    A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

    PatchVendor advisory
  • medium5.1Patched in wingetCVE-2026-38754affects v1.38.0Jul 15, 2026

    A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

    PatchVendor advisory
  • low2.9Patched in wingetCVE-2026-38752affects v2024-07-13Jul 15, 2026

    A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.

    PatchVendor advisory
  • medium4.9Patched in wingetCVE-2026-38753affects v1.38.0Jul 15, 2026

    A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.

    PatchVendor advisory
  • medium6.5Patched in wingetCVE-2025-60876affects <=1.37.0Nov 10, 2025

    BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target...

  • low3.2Patched in wingetCVE-2025-46394affects <=1.37.0Apr 23, 2025

    In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.

  • medium5.5Patched in wingetCVE-2023-42366affects v1.36.1Nov 27, 2023

    A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.

    Vendor advisory
  • medium5.5Patched in wingetCVE-2023-42365affects v1.36.1Nov 27, 2023

    A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.

    Vendor advisory
Showing 8 of 25. Source: NVD, updated 5h ago. Patch status is best-effort: NVD's fix version is compared against the latest version in winget, but the two version formats don't always align. Confirm with the vendor advisory before treating any specific build as safe.

See a CVE that affects your fleet? Push the patched version to Intune in one click with Pckgr - automated patching is the only way to keep up.

Frequently asked questions

How do I install busybox-w32 on Windows?
Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id frippery.busybox-w32 --exact --version 1.38.0-FRP-5579-g5749feb35. winget downloads the installer from frippery.org and runs it. Requires Windows 10 (1809+) or Windows 11.
How do I install busybox-w32 silently for unattended deployment?
Add --silent and accept the agreements upfront: winget install --id frippery.busybox-w32 --exact 1.38.0-FRP-5579-g5749feb35 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.
How do I uninstall busybox-w32 via winget?
Run: winget uninstall --id frippery.busybox-w32 --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from busybox-w32's Apps & Features entry.
Is busybox-w32 free?
busybox-w32 is distributed under GPL-2.0-only. Refer to the publisher for the full license terms - Wingetly itself does not charge for installation.
Does busybox-w32 work on Windows 10?
Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls busybox-w32 directly from the publisher.
How do I keep busybox-w32 up to date?
Run winget upgrade --id frippery.busybox-w32 --exact, or winget upgrade --all to update everything winget tracks. We index 3 versions of busybox-w32 from microsoft/winget-pkgs.

Recent versions

  • 1.38.0-FRP-5579-g5749feb35latest
  • 1.37.0-FRP-5301-gda71f7c57
  • 1.37.0-FRP-5007-g82accfc19