Medium 4.4Published Jul 16, 2026

CVE-2026-10588A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory.

Updated under an hour ago (Oct 27, 2026, 1:30 PM ET)

Does this affect you?

It affects Lenovo Yoga Pro 7 15IPH11 BIOS and 56 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Lenovo Yoga Pro 7 15IPH11 BIOS

Exploited in the last 30 days

A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory.

CVSS: 4.4 MEDIUM (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Weakness (CWE): CWE-497
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: lenovo
NVD analysis: Awaiting Analysis
Record last updated: Jul 16, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Lenovo Yoga Pro 7 15IPH11 BIOS lenovo:yoga_pro_7_15iph11_bios (from the name)	before TNCN37WW	CNA record
Lenovo IdeaPad Pro 5 16IPH11 BIOS lenovo:ideapad_pro_5_16iph11_bios (from the name)	before S4CN62WW	CNA record
Lenovo Legion 7 16AGP11 BIOS lenovo:legion_7_16agp11_bios (from the name)	through TPCN27WW	CNA record
Lenovo IdeaPad Pro 5 16AGP11 BIOS lenovo:ideapad_pro_5_16agp11_bios (from the name)	through T8CN19WW	CNA record
Lenovo Legion Pro 5 16ADR10 BIOS lenovo:legion_pro_5_16adr10_bios (from the name)	through U5CN07WW	CNA record
Lenovo Lenovo V15 G6 ARP BIOS lenovo:v15_g6_arp_bios (from the name)	through TYCN15WW	CNA record
Lenovo LOQ 15ARP10E BIOS lenovo:loq_15arp10e_bios (from the name)	before SUCN18WW	CNA record
Lenovo Yoga Book 9 14IAH10 BIOS lenovo:yoga_book_9_14iah10_bios (from the name)	through QEME23WW	CNA record
Lenovo Legion Pro 7 16AFR10H BIOS lenovo:legion_pro_7_16afr10h_bios (from the name)	before SMCN20WW	CNA record
Lenovo Legion Pro 5 16AFR10 BIOS lenovo:legion_pro_5_16afr10_bios (from the name)	through RECN14WW	CNA record
1–10 of 57

References

References

https://support.lenovo.com/us/en/product_security/LEN-220440	vendor-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.