CVE-2026-10588
A potential vulnerability could allow a local privileged attacker to disclose the address of...
A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory.
- Record
CVE-2026-10588- CVSS 4.0
- 6.7 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-497
- Updated
- 2026-11-02
EUVDEUVD-2026-44980
A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory.
- Record
EUVD-2026-44980- CVSS 4.0
- 6.7 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-vr8x-qg62-cfwr
A potential vulnerability could allow a local privileged attacker to disclose the address of...
A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory.
- Record
GHSA-vr8x-qg62-cfwr- CVSS 4.0
- 6.7 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-497
- Updated
- 2026-11-02
NVD
A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory.
- Record
CVE-2026-10588- CVSS 4.0
- 6.7 Medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 4.4 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-497
- Updated
- 2026-11-02
Affected products
- lenovo ideapad 5 15aba7 bios
- lenovo ideapad pro 5 16agp11 bios
- lenovo ideapad pro 5 16asp10 bios
- lenovo ideapad pro 5 16iah10 bios
- lenovo ideapad pro 5 16imh9 bios
- lenovo ideapad pro 5 16iph11 bios
- lenovo ideapad pro 5 16irh8 bios
- lenovo ideapad slim 3 14itn9 bios
- lenovo ideapad slim 3 15amn8 bios
- lenovo ideapad slim 3 16arp10 bios
- lenovo ideapad slim 3 16irh10r bios
- lenovo ideapad slim 3 16irh8 bios
Show 45 moreShow less
- lenovo ideapad slim 3 16iru9 bios
- lenovo legion 5 15ahp10 bios
- lenovo legion 5 15akp10 bios
- lenovo legion 5 15aph9 bios
- lenovo legion 5 15iax10 bios
- lenovo legion 5 15irx10 bios
- lenovo legion 5 15irx9 bios
- lenovo legion 7 16agp11 bios
- lenovo legion 7 16iax10 bios
- lenovo legion 9 16irx9 bios
- lenovo legion pro 5 16adr10 bios
- lenovo legion pro 5 16afr10 bios
- lenovo legion pro 5 16arx8 bios
- lenovo legion pro 5 16iax10 bios
- lenovo legion pro 5 16irx10 bios
- lenovo legion pro 5 16irx9 bios
- lenovo legion pro 7 16adr10h bios
- lenovo legion pro 7 16afr10h bios
- lenovo legion pro 7 16arx8h bios
- lenovo legion pro 7 16iax10h bios
- lenovo legion pro 7 16irx9h bios
- lenovo legion slim 5 14aph8 bios
- lenovo s14 g3 iap bios
- lenovo v14 g6 itn bios
- lenovo v15 g2 ijl laptop bios
- lenovo v15 g4 amn bios
- lenovo v15 g4 iah bios
- lenovo v15 g5 irl bios
- lenovo v15 g6 arp bios
- lenovo loq 15arp10e bios
- lenovo loq 15iax9e bios
- lenovo thinkbook 16p g5 irx bios
- lenovo thinkbook 16p g6 adr bios
- lenovo thinkbook 16p g6 iax bios
- lenovo thinkbook plus g4 iru bios
- lenovo thinkbook plus g5 tab&thinkbook plus g5 station bios
- lenovo thinkbook plus g6 rollable bios
- lenovo yoga 9 14irp8 bios
- lenovo yoga 9 2-in-1 14ill10 bios
- lenovo yoga 9 2-in-1 14imh9 bios
- lenovo yoga book 9 13imu9 bios
- lenovo yoga book 9 14iah10 bios
- lenovo yoga pro 7 15iph11 bios
- lenovo yoga pro 9 14irp8 bios
- lenovo yoga pro 9 16imh9 bios
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-10588 is a medium vulnerability (CVSS 6.7) in Lenovo Ideapad 5 15aba7 Bios, published July 16, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.15%, the 4th percentile. No source names a fixed version.