CVE-2026-10587

Severity: medium (CVSS 6.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-07-16 · updated 2026-07-16
Weakness: CWE-787

Description

A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode.

Affected products

Lenovo IdeaPad 5 15ABA7 BIOS: before KACN29WW — fixed in KACN29WW
Lenovo IdeaPad Pro 5 16AGP11 BIOS: through T8CN19WW
Lenovo IdeaPad Pro 5 16ASP10 BIOS: through R1CN24WW
Lenovo IdeaPad Pro 5 16IAH10 BIOS: through PZCN27WW
Lenovo IdeaPad Pro 5 16IMH9 BIOS: through MECN68WW
Lenovo IdeaPad Pro 5 16IPH11 BIOS: before S4CN62WW — fixed in S4CN62WW
Lenovo IdeaPad Pro 5 16IRH8 BIOS: through KZCN46WW
Lenovo IdeaPad Slim 3 14ITN9 BIOS: before QUCN20WW — fixed in QUCN20WW
Lenovo IdeaPad Slim 3 15AMN8 BIOS: before L1CN51WW — fixed in L1CN51WW
Lenovo IdeaPad Slim 3 16ARP10 BIOS: before QBCN30WW — fixed in QBCN30WW
Lenovo IdeaPad Slim 3 16IRH10R BIOS: through QDCN23WW
Lenovo IdeaPad Slim 3 16IRH8 BIOS: before LTCN44WW — fixed in LTCN44WW
Lenovo IdeaPad Slim 3 16IRU9 BIOS: before P2CN27WW — fixed in P2CN27WW
Lenovo Legion 5 15AHP10 BIOS: before RGCN35WW — fixed in RGCN35WW
Lenovo Legion 5 15AKP10 BIOS: through RYCN22WW
Lenovo Legion 5 15APH9 BIOS: before PJCN18WW — fixed in PJCN18WW
Lenovo Legion 5 15IAX10 BIOS: through S2CN15WW
Lenovo Legion 5 15IRX10 BIOS: through QNCN28WW
Lenovo Legion 5 15IRX9 BIOS: through PTCN14WW
Lenovo Legion 7 16AGP11 BIOS: through TPCN27WW
Lenovo Legion 7 16IAX10 BIOS: through RXCN18WW
Lenovo Legion 9 16IRX9 BIOS: through NXCN20WW
Lenovo Legion Pro 5 16ADR10 BIOS: through U5CN07WW; through RLCN21WW
Lenovo Legion Pro 5 16AFR10 BIOS: through RECN14WW
Lenovo Legion Pro 5 16ARX8 BIOS: through LPCN59WW
Lenovo Legion Pro 5 16IAX10 BIOS: through Q6CN26WW
Lenovo Legion Pro 5 16IRX10 BIOS: through S9CN13WW
Lenovo Legion Pro 5 16IRX9 BIOS: before N0CN35WW — fixed in N0CN35WW
Lenovo Legion Pro 7 16ADR10H BIOS: before SJCN17WW — fixed in SJCN17WW
Lenovo Legion Pro 7 16AFR10H BIOS: before SMCN20WW — fixed in SMCN20WW

How to fix

Upgrade to a fixed version: Lenovo IdeaPad 5 15ABA7 BIOS KACN29WW; Lenovo IdeaPad Pro 5 16IPH11 BIOS S4CN62WW; Lenovo IdeaPad Slim 3 14ITN9 BIOS QUCN20WW; Lenovo IdeaPad Slim 3 15AMN8 BIOS L1CN51WW; Lenovo IdeaPad Slim 3 16ARP10 BIOS QBCN30WW; Lenovo IdeaPad Slim 3 16IRH8 BIOS LTCN44WW; Lenovo IdeaPad Slim 3 16IRU9 BIOS P2CN27WW; Lenovo Legion 5 15AHP10 BIOS RGCN35WW; Lenovo Legion 5 15APH9 BIOS PJCN18WW; Lenovo Legion Pro 5 16IRX9 BIOS N0CN35WW; Lenovo Legion Pro 7 16ADR10H BIOS SJCN17WW; Lenovo Legion Pro 7 16AFR10H BIOS SMCN20WW. Check the vendor advisory for mitigations.

References

https://support.lenovo.com/us/en/product_security/LEN-220440

Get alerted when CVE-2026-10587 or the next vulnerability affects your stack