CVE-2026-10588
- State
- Published
- Severity
- 6.7 Medium
- Published
- Jul 16, 2026
- Updated
- Jul 16, 2026
- Reserved
- Jun 1, 2026
Description
A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.7 Medium | CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | lenovo |
| 3.1 | 4.4 Medium | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N | lenovo |
Weaknesses
- CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere
Affected Products
| Product | Versions |
|---|---|
Yoga Pro 7 15IPH11 BIOSLenovo |
|
IdeaPad Pro 5 16IPH11 BIOSLenovo |
|
Legion 7 16AGP11 BIOSLenovo |
|
IdeaPad Pro 5 16AGP11 BIOSLenovo |
|
Legion Pro 5 16ADR10 BIOSLenovo |
|
Lenovo V15 G6 ARP BIOSLenovo |
|
LOQ 15ARP10E BIOSLenovo |
|
Yoga Book 9 14IAH10 BIOSLenovo |
|
Legion Pro 7 16AFR10H BIOSLenovo |
|
Legion Pro 5 16AFR10 BIOSLenovo |
|
Legion Pro 7 16ADR10H BIOSLenovo |
|
Lenovo V15 G4 AMN BIOSLenovo |
|
ThinkBook Plus G6 Rollable BIOSLenovo |
|
Legion 5 15IAX10 BIOSLenovo |
|
Legion 5 15AKP10 BIOSLenovo |
|
Legion 5 15IRX10 BIOSLenovo |
|
Legion Pro 5 16IRX10 BIOSLenovo |
|
ThinkBook 16p G6 ADR BIOSLenovo |
|
Legion Pro 5 16ADR10 BIOSLenovo |
|
Legion 5 15AHP10 BIOSLenovo |
|
Legion Pro 7 16IRX9H BIOSLenovo |
|
Legion 9 16IRX9 BIOSLenovo |
|
IdeaPad Slim 3 16IRU9 BIOSLenovo |
|
Legion Pro 5 16IRX9 BIOSLenovo |
|
IdeaPad Pro 5 16IMH9 BIOSLenovo |
|
Legion Pro 7 16ARX8H BIOSLenovo |
|
ThinkBook Plus G4 IRU BIOSLenovo |
|
Legion Slim 5 14APH8 BIOSLenovo |
|
ThinkBook Plus G5 Tab&ThinkBook Plus G5 Station BIOSLenovo |
|
Legion Pro 7 16ARX8H BIOSLenovo |
|
Lenovo V15 G4 IAH BIOSLenovo |
|
Lenovo V15 G5 IRL BIOSLenovo |
|
Yoga Pro 9 14IRP8 BIOSLenovo |
|
IdeaPad Slim 3 16IRH8 BIOSLenovo |
|
IdeaPad Pro 5 16IRH8 BIOSLenovo |
|
IdeaPad Slim 3 15AMN8 BIOSLenovo |
|
Yoga 9 14IRP8 BIOSLenovo |
|
Legion Pro 5 16ARX8 BIOSLenovo |
|
Lenovo S14 G3 IAP BIOSLenovo |
|
IdeaPad 5 15ABA7 BIOSLenovo |
|
ThinkBook 16p G5 IRX BIOSLenovo |
|
Lenovo V15 G2 IJL Laptop BIOSLenovo |
|
Yoga Pro 9 16IMH9 BIOSLenovo |
|
ThinkBook 16p G6 IAX BIOSLenovo |
|
Legion 7 16IAX10 BIOSLenovo |
|
Legion Pro 5 16IAX10 BIOSLenovo |
|
Legion Pro 7 16IAX10H BIOSLenovo |
|
IdeaPad Slim 3 16IRH10R BIOSLenovo |
|
Legion 5 15IRX9 BIOSLenovo |
|
Lenovo V14 G6 ITN BIOSLenovo |
|
Yoga Book 9 14IAH10 BIOSLenovo |
|
IdeaPad Slim 3 14ITN9 BIOSLenovo |
|
IdeaPad Slim 3 16ARP10 BIOSLenovo |
|
IdeaPad Pro 5 16ASP10 BIOSLenovo |
|
Legion 5 15APH9 BIOSLenovo |
|
Yoga 9 2-in-1 14ILL10 BIOSLenovo |
|
Yoga Book 9 13IMU9 BIOSLenovo |
|
IdeaPad Pro 5 16IAH10 BIOSLenovo |
|
LOQ 15IAX9E BIOSLenovo |
|
Yoga 9 2-in-1 14IMH9 BIOSLenovo |
|
References
- https://support.lenovo.com/us/en/product_security/LEN-220440vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.