Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-10587

Quick assessment

Affected
Lenovo Yoga Pro 7 15IPH11 BIOS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Lenovo Yoga Pro 7 15IPH11 BIOS是中国Lenovo公司的一款笔记本BIOS固件。 Lenovo Yoga Pro 7 15IPH11 BIOS存在缓冲区错误漏洞，该漏洞源于越界写入问题，可能导致本地特权攻击者修改系统管理模式下的电源管理设置。以下版本受到影响：Yoga Pro 7 15IPH11 BIOS TNCN37WW之前版本、IdeaPad Pro 5 16IPH11 BIOS S4CN62WW之前版本、Legion 7 16AGP11 BIOS TPCN27WW及之前版

CVSS 6.0 · Medium EPSS 0.15% · P3

Possible ATT&CK Techniques 1 AI

T1055 · Process Injection

Affected Version Matrix 60

VendorProduct Version RangeStatus
Lenovo IdeaPad 5 15ABA7 BIOS < KACN29WW affected
Lenovo IdeaPad Pro 5 16AGP11 BIOS ≤ T8CN19WW affected
Lenovo IdeaPad Pro 5 16ASP10 BIOS ≤ R1CN24WW affected
Lenovo IdeaPad Pro 5 16IAH10 BIOS ≤ PZCN27WW affected
Lenovo IdeaPad Pro 5 16IMH9 BIOS ≤ MECN68WW affected
Lenovo IdeaPad Pro 5 16IPH11 BIOS < S4CN62WW affected
Lenovo IdeaPad Pro 5 16IRH8 BIOS ≤ KZCN46WW affected
Lenovo IdeaPad Slim 3 14ITN9 BIOS < QUCN20WW affected
Lenovo IdeaPad Slim 3 15AMN8 BIOS < L1CN51WW affected
Lenovo IdeaPad Slim 3 16ARP10 BIOS < QBCN30WW affected
Lenovo IdeaPad Slim 3 16IRH10R BIOS ≤ QDCN23WW affected
Lenovo IdeaPad Slim 3 16IRH8 BIOS < LTCN44WW affected
Lenovo IdeaPad Slim 3 16IRU9 BIOS < P2CN27WW affected
Lenovo Legion 5 15AHP10 BIOS < RGCN35WW affected
Lenovo Legion 5 15AKP10 BIOS ≤ RYCN22WW affected
Lenovo Legion 5 15APH9 BIOS < PJCN18WW affected
Lenovo Legion 5 15IAX10 BIOS ≤ S2CN15WW affected
Lenovo Legion 5 15IRX10 BIOS ≤ QNCN28WW affected
Lenovo Legion 5 15IRX9 BIOS ≤ PTCN14WW affected
Lenovo Legion 7 16AGP11 BIOS ≤ TPCN27WW affected
Lenovo Legion 7 16IAX10 BIOS ≤ RXCN18WW affected
Lenovo Legion 9 16IRX9 BIOS ≤ NXCN20WW affected
Lenovo Legion Pro 5 16ADR10 BIOS ≤ U5CN07WW affected
≤ RLCN21WW affected
Lenovo Legion Pro 5 16AFR10 BIOS ≤ RECN14WW affected
Lenovo Legion Pro 5 16ARX8 BIOS ≤ LPCN59WW affected
Lenovo Legion Pro 5 16IAX10 BIOS ≤ Q6CN26WW affected
Lenovo Legion Pro 5 16IRX10 BIOS ≤ S9CN13WW affected
Lenovo Legion Pro 5 16IRX9 BIOS < N0CN35WW affected
Lenovo Legion Pro 7 16ADR10H BIOS < SJCN17WW affected
Lenovo Legion Pro 7 16AFR10H BIOS < SMCN20WW affected
Lenovo Legion Pro 7 16ARX8H BIOS ≤ LPCN45WW affected
≤ LPCN59WW affected
Lenovo Legion Pro 7 16IAX10H BIOS ≤ Q7CN31WW affected
Lenovo Legion Pro 7 16IRX9H BIOS ≤ N2CN26WW affected
Lenovo Legion Slim 5 14APH8 BIOS ≤ MACN33WW affected
Lenovo Lenovo S14 G3 IAP BIOS ≤ JKCN49WW affected
Lenovo Lenovo V14 G6 ITN BIOS < RHCN20WW affected
Lenovo Lenovo V15 G2 IJL Laptop BIOS < HTCN49WW affected
Lenovo Lenovo V15 G4 AMN BIOS < L1CN72WW affected
Lenovo Lenovo V15 G4 IAH BIOS < MCCN39WW affected
Lenovo Lenovo V15 G5 IRL BIOS < PMCN38WW affected
Lenovo Lenovo V15 G6 ARP BIOS ≤ TYCN15WW affected
Lenovo LOQ 15ARP10E BIOS < SUCN18WW affected
Lenovo LOQ 15IAX9E BIOS ≤ Q8CN17WW affected
Lenovo ThinkBook 16p G5 IRX BIOS < P5CN31WW affected
Lenovo ThinkBook 16p G6 ADR BIOS < R7CN26WW affected
Lenovo ThinkBook 16p G6 IAX BIOS < R2CN57WW affected
Lenovo ThinkBook Plus G4 IRU BIOS ≤ LUCN47WW affected
Lenovo ThinkBook Plus G5 Tab&ThinkBook Plus G5 Station BIOS ≤ P8CN42WW affected
Lenovo ThinkBook Plus G6 Rollable BIOS ≤ QWCN34WW affected
Lenovo Yoga 9 14IRP8 BIOS < L4CN31WW affected
Lenovo Yoga 9 2-in-1 14ILL10 BIOS ≤ Q9CN22WW affected
Lenovo Yoga 9 2-in-1 14IMH9 BIOS ≤ NNCN31WW affected
Lenovo Yoga Book 9 13IMU9 BIOS ≤ NVCN24WW affected
Lenovo Yoga Book 9 14IAH10 BIOS ≤ QEME23WW affected
≤ QECN21WW affected
Lenovo Yoga Pro 7 15IPH11 BIOS < TNCN37WW affected
Lenovo Yoga Pro 9 14IRP8 BIOS ≤ MBCN33WW affected
Lenovo Yoga Pro 9 16IMH9 BIOS ≤ NKCN30WW affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-10587

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Lenovo Yoga Pro 7 15IPH11 BIOS 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Lenovo Yoga Pro 7 15IPH11 BIOS是中国Lenovo公司的一款笔记本BIOS固件。 Lenovo Yoga Pro 7 15IPH11 BIOS存在缓冲区错误漏洞，该漏洞源于越界写入问题，可能导致本地特权攻击者修改系统管理模式下的电源管理设置。以下版本受到影响：Yoga Pro 7 15IPH11 BIOS TNCN37WW之前版本、IdeaPad Pro 5 16IPH11 BIOS S4CN62WW之前版本、Legion 7 16AGP11 BIOS TPCN27WW及之前版
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Lenovo Yoga Pro 7 15IPH11 BIOS 0 ~ TNCN37WW -
Lenovo IdeaPad Pro 5 16IPH11 BIOS 0 ~ S4CN62WW -
Lenovo Legion 7 16AGP11 BIOS 0 ~ TPCN27WW -
Lenovo IdeaPad Pro 5 16AGP11 BIOS 0 ~ T8CN19WW -
Lenovo Legion Pro 5 16ADR10 BIOS 0 ~ U5CN07WW -
Lenovo Lenovo V15 G6 ARP BIOS 0 ~ TYCN15WW -
Lenovo LOQ 15ARP10E BIOS 0 ~ SUCN18WW -
Lenovo Yoga Book 9 14IAH10 BIOS 0 ~ QEME23WW -
Lenovo Legion Pro 7 16AFR10H BIOS 0 ~ SMCN20WW -
Lenovo Legion Pro 5 16AFR10 BIOS 0 ~ RECN14WW -
Lenovo Legion Pro 7 16ADR10H BIOS 0 ~ SJCN17WW -
Lenovo Lenovo V15 G4 AMN BIOS 0 ~ L1CN72WW -
Lenovo ThinkBook Plus G6 Rollable BIOS 0 ~ QWCN34WW -
Lenovo Legion 5 15IAX10 BIOS 0 ~ S2CN15WW -
Lenovo Legion 5 15AKP10 BIOS 0 ~ RYCN22WW -
Lenovo Legion 5 15IRX10 BIOS 0 ~ QNCN28WW -
Lenovo Legion Pro 5 16IRX10 BIOS 0 ~ S9CN13WW -
Lenovo ThinkBook 16p G6 ADR BIOS 0 ~ R7CN26WW -
Lenovo Legion Pro 5 16ADR10 BIOS 0 ~ RLCN21WW -
Lenovo Legion 5 15AHP10 BIOS 0 ~ RGCN35WW -
Lenovo Legion Pro 7 16IRX9H BIOS 0 ~ N2CN26WW -
Lenovo Legion 9 16IRX9 BIOS 0 ~ NXCN20WW -
Lenovo IdeaPad Slim 3 16IRU9 BIOS 0 ~ P2CN27WW -
Lenovo Legion Pro 5 16IRX9 BIOS 0 ~ N0CN35WW -
Lenovo IdeaPad Pro 5 16IMH9 BIOS 0 ~ MECN68WW -
Lenovo Legion Pro 7 16ARX8H BIOS 0 ~ LPCN45WW -
Lenovo ThinkBook Plus G4 IRU BIOS 0 ~ LUCN47WW -
Lenovo Legion Slim 5 14APH8 BIOS 0 ~ MACN33WW -
Lenovo ThinkBook Plus G5 Tab&ThinkBook Plus G5 Station BIOS 0 ~ P8CN42WW -
Lenovo Legion Pro 7 16ARX8H BIOS 0 ~ LPCN59WW -

II. Public POCs for CVE-2026-10587

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-10587

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-10587 (1)

Same Patch Batch · Lenovo · 2026-07-16 · 9 CVEs total

CVE-2026-13104 7.3 HIGH Lenovo app store 权限许可和访问控制问题漏洞
CVE-2026-13103 7.3 HIGH Lenovo app store 路径遍历漏洞
CVE-2026-9046 7.0 HIGH Lenovo Legion Zone 权限许可和访问控制问题漏洞
CVE-2026-10589 6.0 MEDIUM Lenovo BIOS 缓冲区错误漏洞
CVE-2026-6511 5.5 MEDIUM Lenovo Smart Connect 授权问题漏洞
CVE-2026-10590 4.4 MEDIUM Lenovo Yoga Pro 7 15IPH11 BIOS 安全漏洞
CVE-2026-10588 4.4 MEDIUM Lenovo Yoga Pro 7 15IPH11 BIOS 信息泄露漏洞
CVE-2026-14371 Lenovo XClarity Integrator for Microsoft Windows Admin Center 命令注入漏洞

IV. Related Vulnerabilities

Same product: Yoga Pro 7 15IPH11 BIOS
Same vendor: Lenovo

V. Comments for CVE-2026-10587

No comments yet

Leave a comment