Skip to main content

Lenovo BIOS EUVDEUVD-2026-44980

| CVE-2026-10588 MEDIUM
Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497)
2026-07-16 lenovo GHSA-vr8x-qg62-cfwr
Information Disclosure Yoga Pro 7 15Iph11 Bios Ideapad Pro 5 16Iph11 Bios Legion 7 16Agp11 Bios Ideapad Pro 5 16Agp11 Bios Legion Pro 5 16Adr10 Bios Lenovo V15 G6 Arp Bios Loq 15Arp10E Bios Yoga Book 9 14Iah10 Bios Legion Pro 7 16Afr10H Bios Legion Pro 5 16Afr10 Bios Legion Pro 7 16Adr10H Bios Lenovo V15 G4 Amn Bios Thinkbook Plus G6 Rollable Bios Legion 5 15Iax10 Bios Legion 5 15Akp10 Bios Legion 5 15Irx10 Bios Legion Pro 5 16Irx10 Bios Thinkbook 16P G6 Adr Bios Legion 5 15Ahp10 Bios Legion Pro 7 16Irx9H Bios Legion 9 16Irx9 Bios Ideapad Slim 3 16Iru9 Bios Legion Pro 5 16Irx9 Bios Ideapad Pro 5 16Imh9 Bios Legion Pro 7 16Arx8H Bios Thinkbook Plus G4 Iru Bios Legion Slim 5 14Aph8 Bios Thinkbook Plus G5 Tab Thinkbook Plus G5 Station Bios Lenovo V15 G4 Iah Bios Lenovo V15 G5 Irl Bios Yoga Pro 9 14Irp8 Bios Ideapad Slim 3 16Irh8 Bios Ideapad Pro 5 16Irh8 Bios Ideapad Slim 3 15Amn8 Bios Yoga 9 14Irp8 Bios Legion Pro 5 16Arx8 Bios Lenovo S14 G3 Iap Bios Ideapad 5 15Aba7 Bios Thinkbook 16P G5 Irx Bios Lenovo V15 G2 Ijl Laptop Bios Yoga Pro 9 16Imh9 Bios Thinkbook 16P G6 Iax Bios Legion 7 16Iax10 Bios Legion Pro 5 16Iax10 Bios Legion Pro 7 16Iax10H Bios Ideapad Slim 3 16Irh10R Bios Legion 5 15Irx9 Bios Lenovo V14 G6 Itn Bios Ideapad Slim 3 14Itn9 Bios Ideapad Slim 3 16Arp10 Bios Ideapad Pro 5 16Asp10 Bios Legion 5 15Aph9 Bios Yoga 9 2 In 1 14Ill10 Bios Yoga Book 9 13Imu9 Bios Ideapad Pro 5 16Iah10 Bios Loq 15Iax9E Bios Yoga 9 2 In 1 14Imh9 Bios
6.7
CVSS 4.0 · Vendor: lenovo
Share

Severity by source

Vendor (lenovo) PRIMARY
6.7 MEDIUM
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
4.4 MEDIUM

Local-only vector, high privileges mandatory to access BIOS SMM interface; sole impact is confidentiality via SMRAM address disclosure.

3.1 AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
4.0 AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (lenovo).

CVSS VectorVendor: lenovo

CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
X

Lifecycle Timeline

2
Analysis Generated
Jul 16, 2026 - 17:19 vuln.today
CVE Published
Jul 16, 2026 - 16:49 cve.org
MEDIUM 6.7

DescriptionCVE.org

A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory.

AnalysisAI

SMM memory address disclosure in Lenovo laptop BIOS firmware exposes the location of protected System Management Mode (SMRAM) regions to a local privileged attacker. Dozens of Lenovo consumer, gaming, and business laptop product lines are affected across IdeaPad, Legion, Yoga, ThinkBook, LOQ, and V-series models. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Obtain local admin/root on target Lenovo laptop
Delivery
Query vulnerable BIOS interface to leak SMRAM address
Exploit
Record protected SMM memory layout
Execution
Use disclosed address to defeat firmware ASLR
Impact
Target SMM handler for follow-on firmware exploit
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires physical or logical local access to an affected Lenovo laptop with a vulnerable BIOS version, and the attacker must already hold high operating-system privileges (administrator on Windows or root on Linux), consistent with CVSS PR:H. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 score of 6.7 (Medium) is consistent with the attack profile: local access and high privileges (PR:H) are mandatory, meaning an attacker must already have administrative or root-level OS control before this vulnerability can be leveraged. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker who has already obtained administrator or root-level access on a Lenovo laptop (via credential theft, privilege escalation exploit, or malicious insider) uses this vulnerability to query or observe SMRAM base addresses through a vulnerable BIOS interface. With the SMRAM layout now known, the attacker can defeat firmware-level ASLR and target specific SMM handler code locations in a follow-on SMM exploitation attempt to implant a persistent firmware rootkit that survives OS reinstallation. …
Remediation The primary remediation is to apply the BIOS firmware update for the affected device, as directed by Lenovo security advisory LEN-220440 (https://support.lenovo.com/us/en/product_security/LEN-220440). … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Yoga Pro 7 15Iph11 Bios

View all
CVE-2026-10589 MEDIUM
6.8 Jul 16

Out-of-bounds write in Lenovo BIOS firmware across dozens of consumer and gaming laptop models enables a local attacker

CVE-2026-10587 MEDIUM
6.8 Jul 16

Out-of-bounds write in Lenovo BIOS firmware across dozens of consumer and gaming laptop models enables a local privilege
CVE-2026-10590 MEDIUM
6.7 Jul 16

Lenovo BIOS firmware across dozens of consumer and gaming laptop models - Legion, IdeaPad, Yoga, ThinkBook, LOQ, and V-s

Same weakness CWE-497 – Exposure of Sensitive System Information to an Unauthorized Control Sphere

View all
CVE-2026-34413 HIGH POC
8.8
CVE-2026-41459 MEDIUM POC
6.9
CVE-2022-1902 HIGH POC
8.8
CVE-2022-4985 HIGH POC
8.7
CVE-2018-25358 HIGH POC
8.7
CVE-2020-36922 HIGH POC
7.5
CVE-2020-36926 HIGH POC
7.5
CVE-2024-25634 MEDIUM POC
6.5

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

EUVD-2026-44980 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy