CVE-2026-10588
Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2026-07-16

Last updated on: 2026-07-16

Assigner: Lenovo Group Ltd.

Description
A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-16
Last Modified
2026-07-16
Generated
2026-10-19
AI Q&A
2026-07-16
EPSS Evaluated
2026-10-18
NVD
CVE-2026-10588
EUVD
EUVD-2026-44980

Affected Vendors & Products

Showing 60 associated CPEs
Vendor Product Version / Range
Lenovo Yoga Pro 7 15IPH11 BIOS 0
Lenovo IdeaPad Pro 5 16IPH11 BIOS 0
Lenovo Legion 7 16AGP11 BIOS 0
Lenovo IdeaPad Pro 5 16AGP11 BIOS 0
Lenovo Legion Pro 5 16ADR10 BIOS 0
Lenovo Lenovo V15 G6 ARP BIOS 0
Lenovo LOQ 15ARP10E BIOS 0
Lenovo Yoga Book 9 14IAH10 BIOS 0
Lenovo Legion Pro 7 16AFR10H BIOS 0
Lenovo Legion Pro 5 16AFR10 BIOS 0
Lenovo Legion Pro 7 16ADR10H BIOS 0
Lenovo Lenovo V15 G4 AMN BIOS 0
Lenovo ThinkBook Plus G6 Rollable BIOS 0
Lenovo Legion 5 15IAX10 BIOS 0
Lenovo Legion 5 15AKP10 BIOS 0
Lenovo Legion 5 15IRX10 BIOS 0
Lenovo Legion Pro 5 16IRX10 BIOS 0
Lenovo ThinkBook 16p G6 ADR BIOS 0
Lenovo Legion Pro 5 16ADR10 BIOS 0
Lenovo Legion 5 15AHP10 BIOS 0
Lenovo Legion Pro 7 16IRX9H BIOS 0
Lenovo Legion 9 16IRX9 BIOS 0
Lenovo IdeaPad Slim 3 16IRU9 BIOS 0
Lenovo Legion Pro 5 16IRX9 BIOS 0
Lenovo IdeaPad Pro 5 16IMH9 BIOS 0
Lenovo Legion Pro 7 16ARX8H BIOS 0
Lenovo ThinkBook Plus G4 IRU BIOS 0
Lenovo Legion Slim 5 14APH8 BIOS 0
Lenovo ThinkBook Plus G5 Tab&ThinkBook Plus G5 Station BIOS 0
Lenovo Legion Pro 7 16ARX8H BIOS 0
Lenovo Lenovo V15 G4 IAH BIOS 0
Lenovo Lenovo V15 G5 IRL BIOS 0
Lenovo Yoga Pro 9 14IRP8 BIOS 0
Lenovo IdeaPad Slim 3 16IRH8 BIOS 0
Lenovo IdeaPad Pro 5 16IRH8 BIOS 0
Lenovo IdeaPad Slim 3 15AMN8 BIOS 0
Lenovo Yoga 9 14IRP8 BIOS 0
Lenovo Legion Pro 5 16ARX8 BIOS 0
Lenovo Lenovo S14 G3 IAP BIOS 0
Lenovo IdeaPad 5 15ABA7 BIOS 0
Lenovo ThinkBook 16p G5 IRX BIOS 0
Lenovo Lenovo V15 G2 IJL Laptop BIOS 0
Lenovo Yoga Pro 9 16IMH9 BIOS 0
Lenovo ThinkBook 16p G6 IAX BIOS 0
Lenovo Legion 7 16IAX10 BIOS 0
Lenovo Legion Pro 5 16IAX10 BIOS 0
Lenovo Legion Pro 7 16IAX10H BIOS 0
Lenovo IdeaPad Slim 3 16IRH10R BIOS 0
Lenovo Legion 5 15IRX9 BIOS 0
Lenovo Lenovo V14 G6 ITN BIOS 0
Lenovo Yoga Book 9 14IAH10 BIOS 0
Lenovo IdeaPad Slim 3 14ITN9 BIOS 0
Lenovo IdeaPad Slim 3 16ARP10 BIOS 0
Lenovo IdeaPad Pro 5 16ASP10 BIOS 0
Lenovo Legion 5 15APH9 BIOS 0
Lenovo Yoga 9 2-in-1 14ILL10 BIOS 0
Lenovo Yoga Book 9 13IMU9 BIOS 0
Lenovo IdeaPad Pro 5 16IAH10 BIOS 0
Lenovo LOQ 15IAX9E BIOS 0
Lenovo Yoga 9 2-in-1 14IMH9 BIOS 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-497 The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows a local attacker with high privileges to potentially access the address of protected System Management Mode memory, which could be used to further exploit the system.

Impact Analysis

If exploited, this vulnerability could lead to information disclosure, allowing an attacker to gain knowledge about sensitive memory locations. This might aid in executing further attacks on the system.

Compliance Impact

The vulnerability allows disclosure of protected System Management Mode memory, which could potentially expose sensitive data. This may impact compliance with GDPR (data protection) and HIPAA (health information privacy) by increasing the risk of unauthorized data access. However, specific compliance impacts depend on system configuration and data handling practices.

Mitigation Strategies

Apply vendor-provided security updates or patches for System Management Mode components. Monitor Lenovo's security advisories for updates. Restrict local privileged access to sensitive memory areas.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-10588. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart