---
id: 5440
title: "ALPC You Later: CVE-2025-64721 Sandbox Escape Smashing The Heap Over IPC"
cve: CVE-2025-64721
cvss: 10
severity: critical
source_domain: depthfirst.com
source_url: "https://depthfirst.com/research/alpc-you-later-cve-2025-64721-sandbox-escape-smashing-the-heap-over-ipc"
published_at: "2025-12-23T00:00:00Z"
tags: ["rce", "vulnerability-research", "windows-security", "sandbox-escape", "heap-overflow", "alpc", "sandboxie", "cve-2025-64721"]
phying_url: "https://phying.com/item/5440"
lang: en
---

# ALPC You Later: CVE-2025-64721 Sandbox Escape Smashing The Heap Over IPC

## Summary

Analysis of CVE-2025-64721, a Sandboxie sandbox escape: a missing bounds check in raw ALPC IPC allowed heap leakage and a 4GB heap smash, leading to SYSTEM-level code execution on Windows.

## Intelligence Metadata

- **Sources:** depthfirst.com
- **CVE:** CVE-2025-64721
- **CVSS:** 10
- **Published:** 2025-12-23T00:00:00Z
- **Original:** https://depthfirst.com/research/alpc-you-later-cve-2025-64721-sandbox-escape-smashing-the-heap-over-ipc
- **Phying News:** https://phying.com/item/5440