CVE-2026-10588
Awaiting Analysis Awaiting Analysis - Queue

Protected SMM Memory Disclosure in Lenovo ThinkSystem Servers

Publication date: 2026-07-16

Last updated on: 2026-07-16

Assigner: Lenovo Group Ltd.

Description
A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-16
Last Modified
2026-07-16
Generated
2026-07-16
AI Q&A
2026-07-16
EPSS Evaluated
N/A
NVD
CVE-2026-10588
EUVD
EUVD-2026-44980

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-497 The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows a local attacker with high privileges to potentially access the address of protected System Management Mode memory, which could be used to further exploit the system.

Impact Analysis

If exploited, this vulnerability could lead to information disclosure, allowing an attacker to gain knowledge about sensitive memory locations. This might aid in executing further attacks on the system.

Compliance Impact

The vulnerability allows disclosure of protected System Management Mode memory, which could potentially expose sensitive data. This may impact compliance with GDPR (data protection) and HIPAA (health information privacy) by increasing the risk of unauthorized data access. However, specific compliance impacts depend on system configuration and data handling practices.

Mitigation Strategies

Apply vendor-provided security updates or patches for System Management Mode components. Monitor Lenovo's security advisories for updates. Restrict local privileged access to sensitive memory areas.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-10588. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart