Kernel Hooks

Sandboxie Kernel Hook Flaw: When Sandboxes Let Keystrokes Escape

A medium-severity vulnerability in Sandboxie's kernel-level input hook allowed malicious sandboxed processes to inject keystrokes and mouse clicks into privileged windows outside the sandbox, including UAC dialogs. The fix adds proper window handle validation to ensure INPUT structures only target windows within the same sandbox boundary. This is a critical reminder that sandbox isolation must be enforced at every layer, especially at the kernel level where input events are processed.