Sandboxie Plus (open source fork of Sandboxie)

[Kool]

Sandboxie 1.15.8 / 5.70.8

Release Notes

 
Sandboxie-Plus v1.15.8 / Classic v5.70.8 introduces several improvements and fixes to enhance usability and stability. The sandbox deletion confirmation prompt has been refined for better clarity. The online updater has been updated to ensure smoother updates, and the Plus installer now includes the ImDisk 3.0 driver for 64-bit systems, expanding its functionality.
This release also addresses key issues reported by users. A problem where the "WriteFilePath" setting was not functioning correctly has been resolved, ensuring expected behavior when writing files. Additionally, an issue with Box Notes that caused matching lines to be deleted upon saving has been fixed, restoring proper note-taking functionality.

https://github.com/sandboxie-plus/Sandboxie/releases

[harlan4096]

Sandboxie Plus 1.15.9 delivers a robust update centered on security, stability, and compatibility—particularly for users of modern web browsers and those prioritizing privacy and sandbox integrity.

A key highlight is the improved compatibility with Firefox 137 Nightly and later, resolving previous hooking issues that caused instability or functional limitations. Firefox now runs smoothly within sandboxed environments once again.

Security enhancements are another major focus. This release addresses a potential IP leakage vulnerability affecting dual-stack IPv4/IPv6 setups when only one proxy type was configured. Connections now fail gracefully if no proxy is set for the relevant IP type, effectively preventing unintentional bypasses and preserving user anonymity—a critical improvement for users relying on VPNs or proxies.

Additionally, a serious local privilege escalation vulnerability tied to the HostInjectDll mechanism has been patched, thanks to responsible disclosure. This fix strengthens Sandboxie's role as a secure execution layer.

For advanced users, a new debug option OpenAllSysCalls=y has been added, allowing unrestricted system call access for testing purposes. However, due to its permissive nature, it should be used with caution.

Among the usability improvements, users can now duplicate sandboxes and their contents directly from the UI, streamlining environment management. The update also introduces a new developer certificate type that disables user-mode component verification for advanced use cases. This node-locked certificate is available at no additional cost to existing Contributor or Eternal/Huge certificate holders upon request.

Overall, version 1.15.9 brings a thoughtful balance of new features, critical fixes, and user-focused enhancements, reinforcing Sandboxie Plus as a powerful tool for secure application isolation.

For a full list of changes please review the change log.

If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.

https://github.com/sandboxie-plus/Sandbo...ag/v1.15.9

[Kool]

Release v1.15.10 / 5.70.10

Added

• added 'BindAdapterIP=192.168.100.123' and/or 'BindAdapterIP=::ffff:c0a8:647b' to force sandboxed programs to use a defined host IP
  • Note: if the IP is not bound to one of the hosts NICs the connections will fail
    
  • the configuration can be set per process like 'BindAdapterIP=program.exe,192.168.100.123', but only in the INI, not in the UI
    

Changed

• greatly improved handling of Patreon certificates
  
• improved certificate tab; serial entry is now always visible, and the certificate text edit as well, though it does not show the critical information UPDATE_KEY/SIGNATURE, instead only ... when mouse clicked the full data gets displayed
  
• streamlined application of new certificates
  

Fixed

• fixed Firefox 137.0 generates SBIE2328 notifications in Sandboxie Plus v1.15.9 #4652 #4652 #4640
  
• fixed SbieShellExt.dll missing in 1.15.9
  
• fixed Process_GetCommandLine causing memory leak #4658
  
• fixed Thunderbird 102.15.1 does not load all extensions under Sandboxie Plus v1.15.9 #4653
  
• fixed in Sandboxie, invoke SetParent change window to message-only window failed #4656
  
• fixed issue with Unicode names when retrieving an evaluation certificate
  
• fixed should the delete content message box always on top? #4673
  

https://github.com/sandboxie-plus/Sandbo...2025-04-15

[Kool]

Release v1.15.11 / 5.70.11

 
Fixed

• fixed issue with SboxHostDll.dll failing to be injected into OfficeClickToRun.exe
  

https://github.com/sandboxie-plus/Sandbo...2025-04-16