DeutschShown in its original language — a full translation is planned for a future version.
Lenovo BIOS: Mehrere Schwachstellen
view advisory published 2026-07-14
Ein lokaler Angreifer kann mehrere Schwachstellen im BIOS verschiedener Lenovo Computermodelle ausnutzen, um Code auszuführen, Daten zu manipulieren, Informationen offenzulegen, einen Denial of Service zu verursachen und Privilegien zu erweitern.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-10590US | —OT elevated | — | ||
A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler. | ||||
| CVE-2026-10589US | — | — | ||
A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Management Mode. | ||||
| CVE-2026-10588US | — | — | ||
A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory. | ||||
| CVE-2026-10587US | — | — | ||
A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode. | ||||
| CVE-2026-25271US | high7.0 | — | ||
Memory Corruption when processing asynchronous input parameters due to improper handling of modified values between check and use. | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan