CVE-2026-10587: Lenovo Ideapad 5 15aba7 BIOS

Medium severity, CVSS 6.0. EPSS: 0.1% chance of exploitation in the next 30 days.

A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode.

Affected products

• Lenovo Ideapad 5 15aba7 BIOS
• Lenovo Ideapad Pro 5 16agp11 BIOS: up to and including T8CN19WW
• Lenovo Ideapad Pro 5 16asp10 BIOS: up to and including R1CN24WW
• Lenovo Ideapad Pro 5 16iah10 BIOS
• Lenovo Ideapad Pro 5 16imh9 BIOS
• Lenovo Ideapad Pro 5 16iph11 BIOS: before S4CN62WW (fixed in S4CN62WW)
• Lenovo Ideapad Pro 5 16irh8 BIOS
• Lenovo Ideapad Slim 3 14itn9 BIOS
• Lenovo Ideapad Slim 3 15amn8 BIOS: before L1CN51WW (fixed in L1CN51WW)
• Lenovo Ideapad Slim 3 16arp10 BIOS
• Lenovo Ideapad Slim 3 16irh10r BIOS
• Lenovo Ideapad Slim 3 16irh8 BIOS
• Lenovo Ideapad Slim 3 16iru9 BIOS: before P2CN27WW (fixed in P2CN27WW)
• Lenovo Legion 5 15ahp10 BIOS
• Lenovo Legion 5 15akp10 BIOS
• Lenovo Legion 5 15aph9 BIOS
• Lenovo Legion 5 15iax10 BIOS: up to and including S2CN15WW
• Lenovo Legion 5 15irx10 BIOS
• Lenovo Legion 5 15irx9 BIOS
• Lenovo Legion 7 16agp11 BIOS
• Lenovo Legion 7 16iax10 BIOS
• Lenovo Legion 9 16irx9 BIOS
• Lenovo Legion Pro 5 16adr10 BIOS: up to and including U5CN07WW
• Lenovo Legion Pro 5 16afr10 BIOS
• Lenovo Legion Pro 5 16arx8 BIOS
• and 32 more

Published 2026-07-16. Last modified 2026-07-16.