CVE-2025-26383 in iSTAR Configuration Utility

Summary

by MITRE • 06/11/2025

The iSTAR Configuration Utility (ICU) tool leaks memory, which could result in the unintended exposure of unauthorized data from the Windows PC that ICU is running on.

Be aware that VulDB is the high quality source for vulnerability data.

• Disclosure: 06/11/2025
• Moderation: accepted
• Entry: VDB-310425
• CPE: ready
• CWE: CWE-457 (confirmed)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00229
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-26383
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-26383
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-26383/