CVE-2026-10589
Medium
Description
A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Management Mode.
SeverityMedium
CVSS6.0
Exploit probability—
ProductYoga Pro 7 15IPH11 BIOS
PublishedJul 16, 2026
First seenJul 16, 2026
Weakness typeCWE-787Out-of-bounds write
How to fix
Update
- Lenovo Yoga Pro 7 15IPH11 BIOSTNCN37WW or later
- Lenovo IdeaPad Pro 5 16IPH11 BIOSS4CN62WW or later
- Lenovo LOQ 15ARP10E BIOSSUCN18WW or later
- Lenovo Legion Pro 7 16AFR10H BIOSSMCN20WW or later
- Lenovo Legion Pro 7 16ADR10H BIOSSJCN17WW or later
- Lenovo Lenovo V15 G4 AMN BIOSL1CN72WW or later
- Lenovo ThinkBook 16p G6 ADR BIOSR7CN26WW or later
- Lenovo Legion 5 15AHP10 BIOSRGCN35WW or later
- Lenovo IdeaPad Slim 3 16IRU9 BIOSP2CN27WW or later
- Lenovo Legion Pro 5 16IRX9 BIOSN0CN35WW or later
- Lenovo Lenovo V15 G4 IAH BIOSMCCN39WW or later
- Lenovo Lenovo V15 G5 IRL BIOSPMCN38WW or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Lenovo Yoga Pro 7 15IPH11 BIOS | v < TNCN37WW | TNCN37WW |
| Lenovo IdeaPad Pro 5 16IPH11 BIOS | v < S4CN62WW | S4CN62WW |
| Lenovo Legion 7 16AGP11 BIOS | v ≤ TPCN27WW | — |
| Lenovo IdeaPad Pro 5 16AGP11 BIOS | v ≤ T8CN19WW | — |
| Lenovo Legion Pro 5 16ADR10 BIOS | v ≤ U5CN07WW, v ≤ RLCN21WW | — |
| Lenovo Lenovo V15 G6 ARP BIOS | v ≤ TYCN15WW | — |
| Lenovo LOQ 15ARP10E BIOS | v < SUCN18WW | SUCN18WW |
| Lenovo Yoga Book 9 14IAH10 BIOS | v ≤ QEME23WW, v ≤ QECN21WW | — |
| Lenovo Legion Pro 7 16AFR10H BIOS | v < SMCN20WW | SMCN20WW |
| Lenovo Legion Pro 5 16AFR10 BIOS | v ≤ RECN14WW | — |
| Lenovo Legion Pro 7 16ADR10H BIOS | v < SJCN17WW | SJCN17WW |
| Lenovo Lenovo V15 G4 AMN BIOS | v < L1CN72WW | L1CN72WW |
| Lenovo ThinkBook Plus G6 Rollable BIOS | v ≤ QWCN34WW | — |
| Lenovo Legion 5 15IAX10 BIOS | v ≤ S2CN15WW | — |
| Lenovo Legion 5 15AKP10 BIOS | v ≤ RYCN22WW | — |
| Lenovo Legion 5 15IRX10 BIOS | v ≤ QNCN28WW | — |
| Lenovo Legion Pro 5 16IRX10 BIOS | v ≤ S9CN13WW | — |
| Lenovo ThinkBook 16p G6 ADR BIOS | v < R7CN26WW | R7CN26WW |
| Lenovo Legion 5 15AHP10 BIOS | v < RGCN35WW | RGCN35WW |
| Lenovo Legion Pro 7 16IRX9H BIOS | v ≤ N2CN26WW | — |
| Lenovo Legion 9 16IRX9 BIOS | v ≤ NXCN20WW | — |
| Lenovo IdeaPad Slim 3 16IRU9 BIOS | v < P2CN27WW | P2CN27WW |
| Lenovo Legion Pro 5 16IRX9 BIOS | v < N0CN35WW | N0CN35WW |
| Lenovo IdeaPad Pro 5 16IMH9 BIOS | v ≤ MECN68WW | — |
| Lenovo Legion Pro 7 16ARX8H BIOS | v ≤ LPCN45WW, v ≤ LPCN59WW | — |
| Lenovo ThinkBook Plus G4 IRU BIOS | v ≤ LUCN47WW | — |
| Lenovo Legion Slim 5 14APH8 BIOS | v ≤ MACN33WW | — |
| Lenovo ThinkBook Plus G5 Tab&ThinkBook Plus G5 Station BIOS | v ≤ P8CN42WW | — |
| Lenovo Lenovo V15 G4 IAH BIOS | v < MCCN39WW | MCCN39WW |
| Lenovo Lenovo V15 G5 IRL BIOS | v < PMCN38WW | PMCN38WW |
| Lenovo Yoga Pro 9 14IRP8 BIOS | v ≤ MBCN33WW | — |
| Lenovo IdeaPad Slim 3 16IRH8 BIOS | v < LTCN44WW | LTCN44WW |
| Lenovo IdeaPad Pro 5 16IRH8 BIOS | v ≤ KZCN46WW | — |
| Lenovo IdeaPad Slim 3 15AMN8 BIOS | v < L1CN51WW | L1CN51WW |
| Lenovo Yoga 9 14IRP8 BIOS | v < L4CN31WW | L4CN31WW |
| Lenovo Legion Pro 5 16ARX8 BIOS | v ≤ LPCN59WW | — |
| Lenovo Lenovo S14 G3 IAP BIOS | v ≤ JKCN49WW | — |
| Lenovo IdeaPad 5 15ABA7 BIOS | v < KACN29WW | KACN29WW |
| Lenovo ThinkBook 16p G5 IRX BIOS | v < P5CN31WW | P5CN31WW |
| Lenovo Lenovo V15 G2 IJL Laptop BIOS | v < HTCN49WW | HTCN49WW |
| Lenovo Yoga Pro 9 16IMH9 BIOS | v ≤ NKCN30WW | — |
| Lenovo ThinkBook 16p G6 IAX BIOS | v < R2CN57WW | R2CN57WW |
| Lenovo Legion 7 16IAX10 BIOS | v ≤ RXCN18WW | — |
| Lenovo Legion Pro 5 16IAX10 BIOS | v ≤ Q6CN26WW | — |
| Lenovo Legion Pro 7 16IAX10H BIOS | v ≤ Q7CN31WW | — |
| Lenovo IdeaPad Slim 3 16IRH10R BIOS | v ≤ QDCN23WW | — |
| Lenovo Legion 5 15IRX9 BIOS | v ≤ PTCN14WW | — |
| Lenovo Lenovo V14 G6 ITN BIOS | v < RHCN20WW | RHCN20WW |
| Lenovo IdeaPad Slim 3 14ITN9 BIOS | v < QUCN20WW | QUCN20WW |
| Lenovo IdeaPad Slim 3 16ARP10 BIOS | v < QBCN30WW | QBCN30WW |
| Lenovo IdeaPad Pro 5 16ASP10 BIOS | v ≤ R1CN24WW | — |
| Lenovo Legion 5 15APH9 BIOS | v < PJCN18WW | PJCN18WW |
| Lenovo Yoga 9 2-in-1 14ILL10 BIOS | v ≤ Q9CN22WW | — |
| Lenovo Yoga Book 9 13IMU9 BIOS | v ≤ NVCN24WW | — |
| Lenovo IdeaPad Pro 5 16IAH10 BIOS | v ≤ PZCN27WW | — |
| Lenovo LOQ 15IAX9E BIOS | v ≤ Q8CN17WW | — |
| Lenovo Yoga 9 2-in-1 14IMH9 BIOS | v ≤ NNCN31WW | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.