CVE Feed

    Dashboard / CVE / CVE-2026-10588

    CVE-2026-10588

    A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory.

    Published:Jul 16, 2026
    Last Modified:Aug 1, 2026
    EPS:Jul 16, 2026
    EPSS Score:0.00107
    CVSS Score:4.4

    Affected Products

    Vendor
    Lenovo
    Product
    Ideapad 5 15aba7 Bios
    Vendor
    Lenovo
    Product
    Ideapad Pro 5 16agp11 Bios
    Vendor
    Lenovo
    Product
    Ideapad Pro 5 16asp10 Bios
    Vendor
    Lenovo
    Product
    Ideapad Pro 5 16iah10 Bios
    Vendor
    Lenovo
    Product
    Ideapad Pro 5 16imh9 Bios
    Vendor
    Lenovo
    Product
    Ideapad Pro 5 16iph11 Bios
    Vendor
    Lenovo
    Product
    Ideapad Pro 5 16irh8 Bios
    Vendor
    Lenovo
    Product
    Ideapad Slim 3 14itn9 Bios
    Vendor
    Lenovo
    Product
    Ideapad Slim 3 15amn8 Bios
    Vendor
    Lenovo
    Product
    Ideapad Slim 3 16arp10 Bios
    Vendor
    Lenovo
    Product
    Ideapad Slim 3 16irh10r Bios
    Vendor
    Lenovo
    Product
    Ideapad Slim 3 16irh8 Bios
    Vendor
    Lenovo
    Product
    Ideapad Slim 3 16iru9 Bios
    Vendor
    Lenovo
    Product
    Legion 5 15ahp10 Bios
    Vendor
    Lenovo
    Product
    Legion 5 15akp10 Bios
    Vendor
    Lenovo
    Product
    Legion 5 15aph9 Bios
    Vendor
    Lenovo
    Product
    Legion 5 15iax10 Bios
    Vendor
    Lenovo
    Product
    Legion 5 15irx10 Bios
    Vendor
    Lenovo
    Product
    Legion 5 15irx9 Bios
    Vendor
    Lenovo
    Product
    Legion 7 16agp11 Bios
    Vendor
    Lenovo
    Product
    Legion 7 16iax10 Bios
    Vendor
    Lenovo
    Product
    Legion 9 16irx9 Bios
    Vendor
    Lenovo
    Product
    Legion Pro 5 16adr10 Bios
    Vendor
    Lenovo
    Product
    Legion Pro 5 16afr10 Bios
    Vendor
    Lenovo
    Product
    Legion Pro 5 16arx8 Bios
    Vendor
    Lenovo
    Product
    Legion Pro 5 16iax10 Bios
    Vendor
    Lenovo
    Product
    Legion Pro 5 16irx10 Bios
    Vendor
    Lenovo
    Product
    Legion Pro 5 16irx9 Bios
    Vendor
    Lenovo
    Product
    Legion Pro 7 16adr10h Bios
    Vendor
    Lenovo
    Product
    Legion Pro 7 16afr10h Bios
    Vendor
    Lenovo
    Product
    Legion Pro 7 16arx8h Bios
    Vendor
    Lenovo
    Product
    Legion Pro 7 16iax10h Bios
    Vendor
    Lenovo
    Product
    Legion Pro 7 16irx9h Bios
    Vendor
    Lenovo
    Product
    Legion Slim 5 14aph8 Bios
    Vendor
    Lenovo
    Product
    Lenovo S14 G3 Iap Bios
    Vendor
    Lenovo
    Product
    Lenovo V14 G6 Itn Bios
    Vendor
    Lenovo
    Product
    Lenovo V15 G2 Ijl Laptop Bios
    Vendor
    Lenovo
    Product
    Lenovo V15 G4 Amn Bios
    Vendor
    Lenovo
    Product
    Lenovo V15 G4 Iah Bios
    Vendor
    Lenovo
    Product
    Lenovo V15 G5 Irl Bios
    Vendor
    Lenovo
    Product
    Lenovo V15 G6 Arp Bios
    Vendor
    Lenovo
    Product
    Loq 15arp10e Bios
    Vendor
    Lenovo
    Product
    Loq 15iax9e Bios
    Vendor
    Lenovo
    Product
    Thinkbook 16p G5 Irx Bios
    Vendor
    Lenovo
    Product
    Thinkbook 16p G6 Adr Bios
    Vendor
    Lenovo
    Product
    Thinkbook 16p G6 Iax Bios
    Vendor
    Lenovo
    Product
    Thinkbook Plus G4 Iru Bios
    Vendor
    Lenovo
    Product
    Thinkbook Plus G5 Tab Thinkbook Plus G5 Station Bios
    Vendor
    Lenovo
    Product
    Thinkbook Plus G6 Rollable Bios
    Vendor
    Lenovo
    Product
    Yoga 9 14irp8 Bios
    Vendor
    Lenovo
    Product
    Yoga 9 2-in-1 14ill10 Bios
    Vendor
    Lenovo
    Product
    Yoga 9 2-in-1 14imh9 Bios
    Vendor
    Lenovo
    Product
    Yoga Book 9 13imu9 Bios
    Vendor
    Lenovo
    Product
    Yoga Book 9 14iah10 Bios
    Vendor
    Lenovo
    Product
    Yoga Pro 7 15iph11 Bios
    Vendor
    Lenovo
    Product
    Yoga Pro 9 14irp8 Bios
    Vendor
    Lenovo
    Product
    Yoga Pro 9 16imh9 Bios

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-170 Web Application Fingerprinting
    CAPEC-694 System Location Discovery

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High