CVE-2026-10588
Summary
| CVE | CVE-2026-10588 |
|---|---|
| State | PUBLISHED |
| Assigner | lenovo |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-07-16 17:16:53 UTC |
| Updated | 2026-07-16 18:16:40 UTC |
| Description | A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory. |
Risk And Classification
Primary CVSS: v4.0 6.7 MEDIUM from [email protected]
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS: 0.001540000 probability, percentile 0.049600000 (date 2026-07-20)
Problem Types: CWE-497 | CWE‑497: Exposure of Sensitive System Information | CWE-497 CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 4.0 | [email protected] | Secondary | 6.7 | MEDIUM | CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/C... |
| 4.0 | CNA | CVSS | 6.7 | MEDIUM | CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
| 3.1 | [email protected] | Secondary | 4.4 | MEDIUM | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N |
| 3.1 | CNA | CVSS | 4.4 | MEDIUM | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N |
CVSS v4.0 Breakdown
Attack Vector
LocalAttack Complexity
LowAttack Requirements
NonePrivileges Required
HighUser Interaction
NoneConfidentiality
HighIntegrity
NoneAvailability
NoneSub Conf.
NoneSub Integrity
NoneSub Availability
NoneCVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS v3.1 Breakdown
Attack Vector
LocalAttack Complexity
LowPrivileges Required
HighUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
NoneAvailability
NoneCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Lenovo | Yoga Pro 7 15IPH11 BIOS | affected TNCN37WW custom | Not specified |
| CNA | Lenovo | IdeaPad Pro 5 16IPH11 BIOS | affected S4CN62WW custom | Not specified |
| CNA | Lenovo | Legion 7 16AGP11 BIOS | affected TPCN27WW custom | Not specified |
| CNA | Lenovo | IdeaPad Pro 5 16AGP11 BIOS | affected T8CN19WW custom | Not specified |
| CNA | Lenovo | Legion Pro 5 16ADR10 BIOS | affected U5CN07WW custom | Not specified |
| CNA | Lenovo | Lenovo V15 G6 ARP BIOS | affected TYCN15WW custom | Not specified |
| CNA | Lenovo | LOQ 15ARP10E BIOS | affected SUCN18WW custom | Not specified |
| CNA | Lenovo | Yoga Book 9 14IAH10 BIOS | affected QEME23WW custom | Not specified |
| CNA | Lenovo | Legion Pro 7 16AFR10H BIOS | affected SMCN20WW custom | Not specified |
| CNA | Lenovo | Legion Pro 5 16AFR10 BIOS | affected RECN14WW custom | Not specified |
| CNA | Lenovo | Legion Pro 7 16ADR10H BIOS | affected SJCN17WW custom | Not specified |
| CNA | Lenovo | Lenovo V15 G4 AMN BIOS | affected L1CN72WW custom | Not specified |
| CNA | Lenovo | ThinkBook Plus G6 Rollable BIOS | affected QWCN34WW custom | Not specified |
| CNA | Lenovo | Legion 5 15IAX10 BIOS | affected S2CN15WW custom | Not specified |
| CNA | Lenovo | Legion 5 15AKP10 BIOS | affected RYCN22WW custom | Not specified |
| CNA | Lenovo | Legion 5 15IRX10 BIOS | affected QNCN28WW custom | Not specified |
| CNA | Lenovo | Legion Pro 5 16IRX10 BIOS | affected S9CN13WW custom | Not specified |
| CNA | Lenovo | ThinkBook 16p G6 ADR BIOS | affected R7CN26WW custom | Not specified |
| CNA | Lenovo | Legion Pro 5 16ADR10 BIOS | affected RLCN21WW custom | Not specified |
| CNA | Lenovo | Legion 5 15AHP10 BIOS | affected RGCN35WW custom | Not specified |
| CNA | Lenovo | Legion Pro 7 16IRX9H BIOS | affected N2CN26WW custom | Not specified |
| CNA | Lenovo | Legion 9 16IRX9 BIOS | affected NXCN20WW custom | Not specified |
| CNA | Lenovo | IdeaPad Slim 3 16IRU9 BIOS | affected P2CN27WW custom | Not specified |
| CNA | Lenovo | Legion Pro 5 16IRX9 BIOS | affected N0CN35WW custom | Not specified |
| CNA | Lenovo | IdeaPad Pro 5 16IMH9 BIOS | affected MECN68WW custom | Not specified |
| CNA | Lenovo | Legion Pro 7 16ARX8H BIOS | affected LPCN45WW custom | Not specified |
| CNA | Lenovo | ThinkBook Plus G4 IRU BIOS | affected LUCN47WW custom | Not specified |
| CNA | Lenovo | Legion Slim 5 14APH8 BIOS | affected MACN33WW custom | Not specified |
| CNA | Lenovo | ThinkBook Plus G5 TabThinkBook Plus G5 Station BIOS | affected P8CN42WW custom | Not specified |
| CNA | Lenovo | Legion Pro 7 16ARX8H BIOS | affected LPCN59WW custom | Not specified |
| CNA | Lenovo | Lenovo V15 G4 IAH BIOS | affected MCCN39WW custom | Not specified |
| CNA | Lenovo | Lenovo V15 G5 IRL BIOS | affected PMCN38WW custom | Not specified |
| CNA | Lenovo | Yoga Pro 9 14IRP8 BIOS | affected MBCN33WW custom | Not specified |
| CNA | Lenovo | IdeaPad Slim 3 16IRH8 BIOS | affected LTCN44WW custom | Not specified |
| CNA | Lenovo | IdeaPad Pro 5 16IRH8 BIOS | affected KZCN46WW custom | Not specified |
| CNA | Lenovo | IdeaPad Slim 3 15AMN8 BIOS | affected L1CN51WW custom | Not specified |
| CNA | Lenovo | Yoga 9 14IRP8 BIOS | affected L4CN31WW custom | Not specified |
| CNA | Lenovo | Legion Pro 5 16ARX8 BIOS | affected LPCN59WW custom | Not specified |
| CNA | Lenovo | Lenovo S14 G3 IAP BIOS | affected JKCN49WW custom | Not specified |
| CNA | Lenovo | IdeaPad 5 15ABA7 BIOS | affected KACN29WW custom | Not specified |
| CNA | Lenovo | ThinkBook 16p G5 IRX BIOS | affected P5CN31WW custom | Not specified |
| CNA | Lenovo | Lenovo V15 G2 IJL Laptop BIOS | affected HTCN49WW custom | Not specified |
| CNA | Lenovo | Yoga Pro 9 16IMH9 BIOS | affected NKCN30WW custom | Not specified |
| CNA | Lenovo | ThinkBook 16p G6 IAX BIOS | affected R2CN57WW custom | Not specified |
| CNA | Lenovo | Legion 7 16IAX10 BIOS | affected RXCN18WW custom | Not specified |
| CNA | Lenovo | Legion Pro 5 16IAX10 BIOS | affected Q6CN26WW custom | Not specified |
| CNA | Lenovo | Legion Pro 7 16IAX10H BIOS | affected Q7CN31WW custom | Not specified |
| CNA | Lenovo | IdeaPad Slim 3 16IRH10R BIOS | affected QDCN23WW custom | Not specified |
| CNA | Lenovo | Legion 5 15IRX9 BIOS | affected PTCN14WW custom | Not specified |
| CNA | Lenovo | Lenovo V14 G6 ITN BIOS | affected RHCN20WW custom | Not specified |
| CNA | Lenovo | Yoga Book 9 14IAH10 BIOS | affected QECN21WW custom | Not specified |
| CNA | Lenovo | IdeaPad Slim 3 14ITN9 BIOS | affected QUCN20WW custom | Not specified |
| CNA | Lenovo | IdeaPad Slim 3 16ARP10 BIOS | affected QBCN30WW custom | Not specified |
| CNA | Lenovo | IdeaPad Pro 5 16ASP10 BIOS | affected R1CN24WW custom | Not specified |
| CNA | Lenovo | Legion 5 15APH9 BIOS | affected PJCN18WW custom | Not specified |
| CNA | Lenovo | Yoga 9 2-in-1 14ILL10 BIOS | affected Q9CN22WW custom | Not specified |
| CNA | Lenovo | Yoga Book 9 13IMU9 BIOS | affected NVCN24WW custom | Not specified |
| CNA | Lenovo | IdeaPad Pro 5 16IAH10 BIOS | affected PZCN27WW custom | Not specified |
| CNA | Lenovo | LOQ 15IAX9E BIOS | affected Q8CN17WW custom | Not specified |
| CNA | Lenovo | Yoga 9 2-in-1 14IMH9 BIOS | affected NNCN31WW custom | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| support.lenovo.com/us/en/product_security/LEN-220440 | [email protected] | support.lenovo.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
CNA: Lenovo thanks 0xiviel/Eva Crystal (XSource Security) for reporting this vulnerability. (en)
Additional Advisory Data
Solutions
CNA: Update to the version (or newer) indicated for your model in the Product Impact section of the advisory - https://support.lenovo.com/us/en/product_security/LEN-220440
There are currently no legacy QID mappings associated with this CVE.