CVE-2026-10590

State: Published
Severity: 6.7 Medium
Published: Jul 16, 2026
Updated: Jul 16, 2026
Reserved: Jun 1, 2026

Description

A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler.

Scores

CVSS	Score	Vector	Source
4.0	6.7 Medium	CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N	lenovo
3.1	4.4 Medium	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N	lenovo

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Yoga Pro 7 15IPH11 BIOSLenovo	before TNCN37WWAffected
IdeaPad Pro 5 16IPH11 BIOSLenovo	before S4CN62WWAffected
Legion 7 16AGP11 BIOSLenovo	TPCN27WW and earlierAffected
IdeaPad Pro 5 16AGP11 BIOSLenovo	T8CN19WW and earlierAffected
Legion Pro 5 16ADR10 BIOSLenovo	U5CN07WW and earlierAffected
Lenovo V15 G6 ARP BIOSLenovo	TYCN15WW and earlierAffected
LOQ 15ARP10E BIOSLenovo	before SUCN18WWAffected
Yoga Book 9 14IAH10 BIOSLenovo	QEME23WW and earlierAffected
Legion Pro 7 16AFR10H BIOSLenovo	before SMCN20WWAffected
Legion Pro 5 16AFR10 BIOSLenovo	RECN14WW and earlierAffected
Legion Pro 7 16ADR10H BIOSLenovo	before SJCN17WWAffected
Lenovo V15 G4 AMN BIOSLenovo	before L1CN72WWAffected
ThinkBook Plus G6 Rollable BIOSLenovo	QWCN34WW and earlierAffected
Legion 5 15IAX10 BIOSLenovo	S2CN15WW and earlierAffected
Legion 5 15AKP10 BIOSLenovo	RYCN22WW and earlierAffected
Legion 5 15IRX10 BIOSLenovo	QNCN28WW and earlierAffected
Legion Pro 5 16IRX10 BIOSLenovo	S9CN13WW and earlierAffected
ThinkBook 16p G6 ADR BIOSLenovo	before R7CN26WWAffected
Legion Pro 5 16ADR10 BIOSLenovo	RLCN21WW and earlierAffected
Legion 5 15AHP10 BIOSLenovo	before RGCN35WWAffected
Legion Pro 7 16IRX9H BIOSLenovo	N2CN26WW and earlierAffected
Legion 9 16IRX9 BIOSLenovo	NXCN20WW and earlierAffected
IdeaPad Slim 3 16IRU9 BIOSLenovo	before P2CN27WWAffected
Legion Pro 5 16IRX9 BIOSLenovo	before N0CN35WWAffected
IdeaPad Pro 5 16IMH9 BIOSLenovo	MECN68WW and earlierAffected
Legion Pro 7 16ARX8H BIOSLenovo	LPCN45WW and earlierAffected
ThinkBook Plus G4 IRU BIOSLenovo	LUCN47WW and earlierAffected
Legion Slim 5 14APH8 BIOSLenovo	MACN33WW and earlierAffected
ThinkBook Plus G5 Tab&ThinkBook Plus G5 Station BIOSLenovo	P8CN42WW and earlierAffected
Legion Pro 7 16ARX8H BIOSLenovo	LPCN59WW and earlierAffected
Lenovo V15 G4 IAH BIOSLenovo	before MCCN39WWAffected
Lenovo V15 G5 IRL BIOSLenovo	before PMCN38WWAffected
Yoga Pro 9 14IRP8 BIOSLenovo	MBCN33WW and earlierAffected
IdeaPad Slim 3 16IRH8 BIOSLenovo	before LTCN44WWAffected
IdeaPad Pro 5 16IRH8 BIOSLenovo	KZCN46WW and earlierAffected
IdeaPad Slim 3 15AMN8 BIOSLenovo	before L1CN51WWAffected
Yoga 9 14IRP8 BIOSLenovo	before L4CN31WWAffected
Legion Pro 5 16ARX8 BIOSLenovo	LPCN59WW and earlierAffected
Lenovo S14 G3 IAP BIOSLenovo	JKCN49WW and earlierAffected
IdeaPad 5 15ABA7 BIOSLenovo	before KACN29WWAffected
ThinkBook 16p G5 IRX BIOSLenovo	before P5CN31WWAffected
Lenovo V15 G2 IJL Laptop BIOSLenovo	before HTCN49WWAffected
Yoga Pro 9 16IMH9 BIOSLenovo	NKCN30WW and earlierAffected
ThinkBook 16p G6 IAX BIOSLenovo	before R2CN57WWAffected
Legion 7 16IAX10 BIOSLenovo	RXCN18WW and earlierAffected
Legion Pro 5 16IAX10 BIOSLenovo	Q6CN26WW and earlierAffected
Legion Pro 7 16IAX10H BIOSLenovo	Q7CN31WW and earlierAffected
IdeaPad Slim 3 16IRH10R BIOSLenovo	QDCN23WW and earlierAffected
Legion 5 15IRX9 BIOSLenovo	PTCN14WW and earlierAffected
Lenovo V14 G6 ITN BIOSLenovo	before RHCN20WWAffected
Yoga Book 9 14IAH10 BIOSLenovo	QECN21WW and earlierAffected
IdeaPad Slim 3 14ITN9 BIOSLenovo	before QUCN20WWAffected
IdeaPad Slim 3 16ARP10 BIOSLenovo	before QBCN30WWAffected
IdeaPad Pro 5 16ASP10 BIOSLenovo	R1CN24WW and earlierAffected
Legion 5 15APH9 BIOSLenovo	before PJCN18WWAffected
Yoga 9 2-in-1 14ILL10 BIOSLenovo	Q9CN22WW and earlierAffected
Yoga Book 9 13IMU9 BIOSLenovo	NVCN24WW and earlierAffected
IdeaPad Pro 5 16IAH10 BIOSLenovo	PZCN27WW and earlierAffected
LOQ 15IAX9E BIOSLenovo	Q8CN17WW and earlierAffected
Yoga 9 2-in-1 14IMH9 BIOSLenovo	NNCN31WW and earlierAffected

References

https://support.lenovo.com/us/en/product_security/LEN-220440vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.