Johnson Controls iSTAR Configuration Utility (ICU)

• CVE-2025-26386 High 7.1 Stack-based Buffer Overflow in Johnson Controls iSTAR Configuration Utility (ICU) tool 0.5%
• CVE-2025-26383 Medium 6.3 The iSTAR Configuration Utility (ICU) tool leaks memory, which could result in the unintended exposure of unauthorized data from the Windows PC that ICU is running on. 0.2%
• CVE-2025-26382 Critical 9.3 Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool 0.6%
• CVE-2024-32752 Critical 9.1 Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool 0.6%