Wingetlywingetly
← All apps

Sandboxie

by sandboxie-plus.comv5.73.4

Last updated

Sandboxie is a sandbox-based isolation software for 32- and 64-bit Windows NT-based operating systems.

Visit homepage

Install with winget

$ winget install --id Sandboxie.Classic --exact --version 5.73.4

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Silent install command for Sandboxie

Sandboxie uses EXE (NSIS). The silent install switches are /S.

One-line silent install (x64, machine scope)
Sandboxie-Classic-x64-v5.73.4.exe /S

See the full silent install reference for Sandboxie →

Built by Pckgr

For Intune admins

Stop chasing app updates. Pckgr patches them for you.

Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.

Start free 30-day trial

No credit card required.

About

Sandboxie is a sandbox-based isolation software for 32- and 64-bit Windows NT-based operating systems.

It is developed by David Xanatos since it became open source, before that it was developed by Sophos (which acquired it from Invincea, which acquired it earlier from the original author Ronen Tzur).

It creates a sandbox-like isolated operating environment in which applications can be run or installed without permanently modifying the local or mapped drive.

Such an isolated virtual environment allows controlled testing of untrusted programs and web surfing.

Installers · v5.73.4

ArchitectureTypeScopeInstallDownload
x64EXE
NSIS
machineDirect

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

15 known CVEs via NVD

  • high7.0Patched in wingetCVE-2026-34596affects before 1.17.3May 5, 2026

    Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, a Time-of-Check-to-Time-of-Use (TOCTOU) race condition exists during addon installation. When a user installs an addon through the SandMan interface, UpdUtil.exe is spa...

    Vendor advisory
  • medium5.3Patched in wingetCVE-2026-34527affects before 1.17.3May 5, 2026

    Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, SbieIniServer::HashPassword converts a SHA-1 digest to hexadecimal incorrectly. The high nibble of each byte is shifted right by 8 instead of 4, which always produces z...

    Vendor advisory
  • high8.8Patched in wingetCVE-2026-34464affects before 1.17.3May 5, 2026

    Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, NamedPipeServer::OpenHandler copies the server field from NAMED_PIPE_OPEN_REQ into a fixed WCHAR pipename[160] stack buffer using wcscat without verifying null terminat...

    Vendor advisory
  • high7.8Patched in wingetCVE-2026-34462affects before 1.17.3May 5, 2026

    Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, several ProcessServer handlers (KillAllHandler, SuspendAllHandler, and RunSandboxedHandler) copy a WCHAR boxname[34] field from request structures into WCHAR[40] stack...

    Vendor advisory
  • high7.8Patched in wingetCVE-2026-34461affects before 1.17.3May 5, 2026

    Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, the SbieIniServer RunSbieCtrl handler contains a stack buffer overflow. The MSGID_SBIE_INI_RUN_SBIE_CTRL message is handled before normal sandbox and impersonation chec...

    Vendor advisory
  • high8.8Patched in wingetCVE-2026-34459affects before 1.17.3May 5, 2026

    Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, the SbieSvc proxy service's GetRawInputDeviceInfoSlave handler contains two vulnerabilities that can be chained for sandbox escape. First, when a sandboxed process send...

    Vendor advisory
  • high8.8Patched in wingetCVE-2026-34458affects before 1.17.3May 5, 2026

    Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, an INI injection vulnerability allows any standard local user to bypass configuration restrictions (EditAdminOnly and ConfigPassword) and inject arbitrary directives in...

    PatchVendor advisory
  • medium6.5Patched in wingetCVE-2026-32603affects before 1.17.3May 5, 2026

    Sandboxie is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, a local denial of service vulnerability exists in the Sandboxie kernel driver. An unprivileged process running inside a Standard Sandbox can send a malformed IOCTL to the \D...

    Vendor advisory
Showing 8 of 15. Source: NVD, updated 2h ago. Patch status is best-effort: NVD's fix version is compared against the latest version in winget, but the two version formats don't always align. Confirm with the vendor advisory before treating any specific build as safe.

See a CVE that affects your fleet? Push the patched version to Intune in one click with Pckgr - automated patching is the only way to keep up.

Related apps

  • A
    AlgodooAlgoryx
    Algoryx.Algodoov2.2.1

    Physics-based 2D sandbox simulator

  • Sandboxie-Plushttp://xanasoft.com/
    Sandboxie.Plusv1.18.4

    Sandboxie is a sandbox-based isolation software for 32- and 64-bit Windows NT-based operating systems.

  • WSBBuilderMojtabaTajik
    MojtabaTajik.WSBBuilderv1.0.0.28

    Easy GUI to generate Windows sandbox configuration files

  • M
    MicrosandboxSuper Rad Company
    SuperRadCompany.Microsandboxv0.6.18

    Fast local microVM runtime for running untrusted workloads with hardware isolation.

  • W
    WasmtimeBytecode Alliance
    BytecodeAlliance.Wasmtime.Portablev48.0.2

    A fast and secure runtime for WebAssembly

  • 3
    3vaOdinoCano
    OdinoCano.3vav2.8.0

    Secure-by-default JavaScript and TypeScript runtime.

More from sandboxie-plus.com or browse sandbox.

Frequently asked questions

How do I install Sandboxie on Windows?
Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id Sandboxie.Classic --exact --version 5.73.4. winget downloads the installer from sandboxie-plus.com and runs it. Requires Windows 10 (1809+) or Windows 11.
How do I install Sandboxie silently for unattended deployment?
Add --silent and accept the agreements upfront: winget install --id Sandboxie.Classic --exact 5.73.4 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.
What are the silent install switches for Sandboxie?
Sandboxie uses EXE (NSIS). Run the downloaded installer with: Sandboxie-Classic-x64-v5.73.4.exe /S. The silent switches are /S.
How do I uninstall Sandboxie via winget?
Run: winget uninstall --id Sandboxie.Classic --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from Sandboxie's Apps & Features entry.
Is Sandboxie free?
Sandboxie is distributed under GPL-3.0. Refer to the publisher (https://github.com/sandboxie-plus/Sandboxie) for the full license terms - Wingetly itself does not charge for installation.
Does Sandboxie work on Windows 10?
Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls Sandboxie directly from the publisher.
How do I keep Sandboxie up to date?
Run winget upgrade --id Sandboxie.Classic --exact, or winget upgrade --all to update everything winget tracks. We index 10 versions of Sandboxie from microsoft/winget-pkgs.

Recent versions

  • 5.73.4latest
  • 5.73.3
  • 5.73.2
  • 5.73.1
  • 5.73.0
  • 5.72.9
  • 5.72.8
  • 5.72.7
  • 5.72.6
  • 5.72.5