6.7
Medium
CVE-2026-10590 A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to…
Description
A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Yoga Pro 7 15IPH11 BIOS | Versions not published | |
| IdeaPad Pro 5 16IPH11 BIOS | Versions not published | |
| Legion 7 16AGP11 BIOS | Versions not published | |
| IdeaPad Pro 5 16AGP11 BIOS | Versions not published | |
| Legion Pro 5 16ADR10 BIOS | Versions not published | |
| Lenovo V15 G6 ARP BIOS | Versions not published | |
| LOQ 15ARP10E BIOS | Versions not published | |
| Yoga Book 9 14IAH10 BIOS | Versions not published | |
| Legion Pro 7 16AFR10H BIOS | Versions not published |
Show the 48 other branches Hide the 48 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Legion Pro 5 16AFR10 BIOS | Versions not published | |
| Legion Pro 7 16ADR10H BIOS | Versions not published | |
| Lenovo V15 G4 AMN BIOS | Versions not published | |
| ThinkBook Plus G6 Rollable BIOS | Versions not published | |
| Legion 5 15IAX10 BIOS | Versions not published | |
| Legion 5 15AKP10 BIOS | Versions not published | |
| Legion 5 15IRX10 BIOS | Versions not published | |
| Legion Pro 5 16IRX10 BIOS | Versions not published | |
| ThinkBook 16p G6 ADR BIOS | Versions not published | |
| Legion 5 15AHP10 BIOS | Versions not published | |
| Legion Pro 7 16IRX9H BIOS | Versions not published | |
| Legion 9 16IRX9 BIOS | Versions not published | |
| IdeaPad Slim 3 16IRU9 BIOS | Versions not published | |
| Legion Pro 5 16IRX9 BIOS | Versions not published | |
| IdeaPad Pro 5 16IMH9 BIOS | Versions not published | |
| Legion Pro 7 16ARX8H BIOS | Versions not published | |
| ThinkBook Plus G4 IRU BIOS | Versions not published | |
| Legion Slim 5 14APH8 BIOS | Versions not published | |
| ThinkBook Plus G5 Tab&ThinkBook Plus G5 Station BIOS | Versions not published | |
| Lenovo V15 G4 IAH BIOS | Versions not published | |
| Lenovo V15 G5 IRL BIOS | Versions not published | |
| Yoga Pro 9 14IRP8 BIOS | Versions not published | |
| IdeaPad Slim 3 16IRH8 BIOS | Versions not published | |
| IdeaPad Pro 5 16IRH8 BIOS | Versions not published | |
| IdeaPad Slim 3 15AMN8 BIOS | Versions not published | |
| Yoga 9 14IRP8 BIOS | Versions not published | |
| Legion Pro 5 16ARX8 BIOS | Versions not published | |
| Lenovo S14 G3 IAP BIOS | Versions not published | |
| IdeaPad 5 15ABA7 BIOS | Versions not published | |
| ThinkBook 16p G5 IRX BIOS | Versions not published | |
| Lenovo V15 G2 IJL Laptop BIOS | Versions not published | |
| Yoga Pro 9 16IMH9 BIOS | Versions not published | |
| ThinkBook 16p G6 IAX BIOS | Versions not published | |
| Legion 7 16IAX10 BIOS | Versions not published | |
| Legion Pro 5 16IAX10 BIOS | Versions not published | |
| Legion Pro 7 16IAX10H BIOS | Versions not published | |
| IdeaPad Slim 3 16IRH10R BIOS | Versions not published | |
| Legion 5 15IRX9 BIOS | Versions not published | |
| Lenovo V14 G6 ITN BIOS | Versions not published | |
| IdeaPad Slim 3 14ITN9 BIOS | Versions not published | |
| IdeaPad Slim 3 16ARP10 BIOS | Versions not published | |
| IdeaPad Pro 5 16ASP10 BIOS | Versions not published | |
| Legion 5 15APH9 BIOS | Versions not published | |
| Yoga 9 2-in-1 14ILL10 BIOS | Versions not published | |
| Yoga Book 9 13IMU9 BIOS | Versions not published | |
| IdeaPad Pro 5 16IAH10 BIOS | Versions not published | |
| LOQ 15IAX9E BIOS | Versions not published | |
| Yoga 9 2-in-1 14IMH9 BIOS | Versions not published |
Other CVEs of Yoga Pro 7 15IPH11 BIOS
The 4 CVEs of Yoga Pro 7 15IPH11 BIOS →
CVE-2026-10589
A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System…
6.8
Medium
CVE-2026-10588
A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management…
6.7
Medium
CVE-2026-10587
A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management…
6.8
Medium