CVE-2021-47831CWE-1284

Sandboxie 5.49.7 - Denial of Service

Medium · published January 16, 2026

CVSS v4.0
4.6
EPSS
0%
Percentile
29.7
In the wild
Unconfirmed
What it is

⚠️ Just a little too much typing can send Sandboxie crashing! Attackers can exploit a buffer overflow in version 5.49.7 by dumping a massive amount of characters into the container folder input field. 😱 Think of it like overloading a filing cabinet. If you cram too many folders into one drawer, it can jam, making it impossible to open — just like how this exploit makes the app unable to function. If an attacker triggers this vulnerability, they could crash the Sandboxie application, disrupting your workflow and causing potential data loss. While it’s not a data breach, it could definitely lead to frustration and downtime!

Put simply

Think of it like overloading a filing cabinet. If you cram too many folders into one drawer, it can jam, making it impossible to open — just like how this exploit makes the app unable to function. This denial of service (DoS) vulnerability in Sandboxie version 5.49.7 allows an attacker to overflow the container folder input field with a large buffer of characters, leading to an application crash.

What to do

If an attacker triggers this vulnerability, they could crash the Sandboxie application, disrupting your workflow and causing potential data loss. While it’s not a data breach, it could definitely lead to frustration and downtime! To protect against this issue, upgrade to Sandboxie version 5.49.8 or later immediately. Additionally, consider implementing input validation to prevent excessively long inputs. Regularly monitor your applications for any unusual behaviors to stay ahead of potential exploits! You've got this! Keep your systems safe and sound, and you'll be a true security hero! 🦸

The record
Technical detail
CVSS v4.0
4.6 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00370 · 29.7th percentile
Weakness
CWE-1284 · Improper Validation of Specified Quantity in Input
Published
2026-01-16T19:09Z
EPSS history
Timeline
  • 16 JAN 19:09Z
    Sandboxie 5.49.7 - Denial of Service
    cvelistv5