CVE-2026-10587— Lenovo Yoga Pro 7 15IPH11 BIOS 缓冲区错误漏洞

CVSS 6.0 · Medium EPSS 0.10% · P1 更新于 2026-07-17

可能的 ATT&CK 技术 1AI

影响版本矩阵 60

厂商	产品	版本范围	状态
Lenovo	IdeaPad 5 15ABA7 BIOS	`< KACN29WW`	affected
Lenovo	IdeaPad Pro 5 16AGP11 BIOS	`≤ T8CN19WW`	affected
Lenovo	IdeaPad Pro 5 16ASP10 BIOS	`≤ R1CN24WW`	affected
Lenovo	IdeaPad Pro 5 16IAH10 BIOS	`≤ PZCN27WW`	affected
Lenovo	IdeaPad Pro 5 16IMH9 BIOS	`≤ MECN68WW`	affected
Lenovo	IdeaPad Pro 5 16IPH11 BIOS	`< S4CN62WW`	affected
Lenovo	IdeaPad Pro 5 16IRH8 BIOS	`≤ KZCN46WW`	affected
Lenovo	IdeaPad Slim 3 14ITN9 BIOS	`< QUCN20WW`	affected
Lenovo	IdeaPad Slim 3 15AMN8 BIOS	`< L1CN51WW`	affected
Lenovo	IdeaPad Slim 3 16ARP10 BIOS	`< QBCN30WW`	affected
Lenovo	IdeaPad Slim 3 16IRH10R BIOS	`≤ QDCN23WW`	affected
Lenovo	IdeaPad Slim 3 16IRH8 BIOS	`< LTCN44WW`	affected
Lenovo	IdeaPad Slim 3 16IRU9 BIOS	`< P2CN27WW`	affected
Lenovo	Legion 5 15AHP10 BIOS	`< RGCN35WW`	affected
Lenovo	Legion 5 15AKP10 BIOS	`≤ RYCN22WW`	affected
Lenovo	Legion 5 15APH9 BIOS	`< PJCN18WW`	affected
Lenovo	Legion 5 15IAX10 BIOS	`≤ S2CN15WW`	affected
Lenovo	Legion 5 15IRX10 BIOS	`≤ QNCN28WW`	affected
Lenovo	Legion 5 15IRX9 BIOS	`≤ PTCN14WW`	affected
Lenovo	Legion 7 16AGP11 BIOS	`≤ TPCN27WW`	affected
Lenovo	Legion 7 16IAX10 BIOS	`≤ RXCN18WW`	affected
Lenovo	Legion 9 16IRX9 BIOS	`≤ NXCN20WW`	affected
Lenovo	Legion Pro 5 16ADR10 BIOS	`≤ U5CN07WW`	affected
		`≤ RLCN21WW`	affected
Lenovo	Legion Pro 5 16AFR10 BIOS	`≤ RECN14WW`	affected
Lenovo	Legion Pro 5 16ARX8 BIOS	`≤ LPCN59WW`	affected
Lenovo	Legion Pro 5 16IAX10 BIOS	`≤ Q6CN26WW`	affected
Lenovo	Legion Pro 5 16IRX10 BIOS	`≤ S9CN13WW`	affected
Lenovo	Legion Pro 5 16IRX9 BIOS	`< N0CN35WW`	affected
Lenovo	Legion Pro 7 16ADR10H BIOS	`< SJCN17WW`	affected
Lenovo	Legion Pro 7 16AFR10H BIOS	`< SMCN20WW`	affected
Lenovo	Legion Pro 7 16ARX8H BIOS	`≤ LPCN45WW`	affected
		`≤ LPCN59WW`	affected
Lenovo	Legion Pro 7 16IAX10H BIOS	`≤ Q7CN31WW`	affected
Lenovo	Legion Pro 7 16IRX9H BIOS	`≤ N2CN26WW`	affected
Lenovo	Legion Slim 5 14APH8 BIOS	`≤ MACN33WW`	affected
Lenovo	Lenovo S14 G3 IAP BIOS	`≤ JKCN49WW`	affected
Lenovo	Lenovo V14 G6 ITN BIOS	`< RHCN20WW`	affected
Lenovo	Lenovo V15 G2 IJL Laptop BIOS	`< HTCN49WW`	affected
Lenovo	Lenovo V15 G4 AMN BIOS	`< L1CN72WW`	affected
Lenovo	Lenovo V15 G4 IAH BIOS	`< MCCN39WW`	affected
Lenovo	Lenovo V15 G5 IRL BIOS	`< PMCN38WW`	affected
Lenovo	Lenovo V15 G6 ARP BIOS	`≤ TYCN15WW`	affected
Lenovo	LOQ 15ARP10E BIOS	`< SUCN18WW`	affected
Lenovo	LOQ 15IAX9E BIOS	`≤ Q8CN17WW`	affected
Lenovo	ThinkBook 16p G5 IRX BIOS	`< P5CN31WW`	affected
Lenovo	ThinkBook 16p G6 ADR BIOS	`< R7CN26WW`	affected
Lenovo	ThinkBook 16p G6 IAX BIOS	`< R2CN57WW`	affected
Lenovo	ThinkBook Plus G4 IRU BIOS	`≤ LUCN47WW`	affected
Lenovo	ThinkBook Plus G5 Tab&ThinkBook Plus G5 Station BIOS	`≤ P8CN42WW`	affected
Lenovo	ThinkBook Plus G6 Rollable BIOS	`≤ QWCN34WW`	affected
Lenovo	Yoga 9 14IRP8 BIOS	`< L4CN31WW`	affected
Lenovo	Yoga 9 2-in-1 14ILL10 BIOS	`≤ Q9CN22WW`	affected
Lenovo	Yoga 9 2-in-1 14IMH9 BIOS	`≤ NNCN31WW`	affected
Lenovo	Yoga Book 9 13IMU9 BIOS	`≤ NVCN24WW`	affected
Lenovo	Yoga Book 9 14IAH10 BIOS	`≤ QEME23WW`	affected
		`≤ QECN21WW`	affected
Lenovo	Yoga Pro 7 15IPH11 BIOS	`< TNCN37WW`	affected
Lenovo	Yoga Pro 9 14IRP8 BIOS	`≤ MBCN33WW`	affected
Lenovo	Yoga Pro 9 16IMH9 BIOS	`≤ NKCN30WW`	affected

获取后续新漏洞提醒登录后订阅

一、漏洞 CVE-2026-10587 基础信息

漏洞信息

对漏洞内容有疑问？看看神龙的深度分析是否有帮助！

查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title

N/A

来源: CVE Program / CVE List V5

Vulnerability Description

A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode.

来源: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

来源: CVE Program / CVE List V5

Vulnerability Type

N/A

来源: CVE Program / CVE List V5

Vulnerability Title

Lenovo Yoga Pro 7 15IPH11 BIOS 缓冲区错误漏洞

来源: 中国国家信息安全漏洞库 CNNVD

Vulnerability Description

Lenovo Yoga Pro 7 15IPH11 BIOS是中国Lenovo公司的一款笔记本BIOS固件。 Lenovo Yoga Pro 7 15IPH11 BIOS存在缓冲区错误漏洞，该漏洞源于越界写入问题，可能导致本地特权攻击者修改系统管理模式下的电源管理设置。以下版本受到影响：Yoga Pro 7 15IPH11 BIOS TNCN37WW之前版本、IdeaPad Pro 5 16IPH11 BIOS S4CN62WW之前版本、Legion 7 16AGP11 BIOS TPCN27WW及之前版

来源: 中国国家信息安全漏洞库 CNNVD

CVSS Information

N/A

来源: 中国国家信息安全漏洞库 CNNVD

Vulnerability Type

N/A

来源: 中国国家信息安全漏洞库 CNNVD

受影响产品

厂商	产品	影响版本	CPE
Lenovo	Yoga Pro 7 15IPH11 BIOS	0 ~ TNCN37WW	-
Lenovo	IdeaPad Pro 5 16IPH11 BIOS	0 ~ S4CN62WW	-
Lenovo	Legion 7 16AGP11 BIOS	0 ~ TPCN27WW	-
Lenovo	IdeaPad Pro 5 16AGP11 BIOS	0 ~ T8CN19WW	-
Lenovo	Legion Pro 5 16ADR10 BIOS	0 ~ U5CN07WW	-
Lenovo	Lenovo V15 G6 ARP BIOS	0 ~ TYCN15WW	-
Lenovo	LOQ 15ARP10E BIOS	0 ~ SUCN18WW	-
Lenovo	Yoga Book 9 14IAH10 BIOS	0 ~ QEME23WW	-
Lenovo	Legion Pro 7 16AFR10H BIOS	0 ~ SMCN20WW	-
Lenovo	Legion Pro 5 16AFR10 BIOS	0 ~ RECN14WW	-
Lenovo	Legion Pro 7 16ADR10H BIOS	0 ~ SJCN17WW	-
Lenovo	Lenovo V15 G4 AMN BIOS	0 ~ L1CN72WW	-
Lenovo	ThinkBook Plus G6 Rollable BIOS	0 ~ QWCN34WW	-
Lenovo	Legion 5 15IAX10 BIOS	0 ~ S2CN15WW	-
Lenovo	Legion 5 15AKP10 BIOS	0 ~ RYCN22WW	-
Lenovo	Legion 5 15IRX10 BIOS	0 ~ QNCN28WW	-
Lenovo	Legion Pro 5 16IRX10 BIOS	0 ~ S9CN13WW	-
Lenovo	ThinkBook 16p G6 ADR BIOS	0 ~ R7CN26WW	-
Lenovo	Legion Pro 5 16ADR10 BIOS	0 ~ RLCN21WW	-
Lenovo	Legion 5 15AHP10 BIOS	0 ~ RGCN35WW	-
Lenovo	Legion Pro 7 16IRX9H BIOS	0 ~ N2CN26WW	-
Lenovo	Legion 9 16IRX9 BIOS	0 ~ NXCN20WW	-
Lenovo	IdeaPad Slim 3 16IRU9 BIOS	0 ~ P2CN27WW	-
Lenovo	Legion Pro 5 16IRX9 BIOS	0 ~ N0CN35WW	-
Lenovo	IdeaPad Pro 5 16IMH9 BIOS	0 ~ MECN68WW	-
Lenovo	Legion Pro 7 16ARX8H BIOS	0 ~ LPCN45WW	-
Lenovo	ThinkBook Plus G4 IRU BIOS	0 ~ LUCN47WW	-
Lenovo	Legion Slim 5 14APH8 BIOS	0 ~ MACN33WW	-
Lenovo	ThinkBook Plus G5 Tab&ThinkBook Plus G5 Station BIOS	0 ~ P8CN42WW	-
Lenovo	Legion Pro 7 16ARX8H BIOS	0 ~ LPCN59WW	-
Lenovo	Lenovo V15 G4 IAH BIOS	0 ~ MCCN39WW	-
Lenovo	Lenovo V15 G5 IRL BIOS	0 ~ PMCN38WW	-
Lenovo	Yoga Pro 9 14IRP8 BIOS	0 ~ MBCN33WW	-
Lenovo	IdeaPad Slim 3 16IRH8 BIOS	0 ~ LTCN44WW	-
Lenovo	IdeaPad Pro 5 16IRH8 BIOS	0 ~ KZCN46WW	-
Lenovo	IdeaPad Slim 3 15AMN8 BIOS	0 ~ L1CN51WW	-
Lenovo	Yoga 9 14IRP8 BIOS	0 ~ L4CN31WW	-
Lenovo	Legion Pro 5 16ARX8 BIOS	0 ~ LPCN59WW	-
Lenovo	Lenovo S14 G3 IAP BIOS	0 ~ JKCN49WW	-
Lenovo	IdeaPad 5 15ABA7 BIOS	0 ~ KACN29WW	-
Lenovo	ThinkBook 16p G5 IRX BIOS	0 ~ P5CN31WW	-
Lenovo	Lenovo V15 G2 IJL Laptop BIOS	0 ~ HTCN49WW	-
Lenovo	Yoga Pro 9 16IMH9 BIOS	0 ~ NKCN30WW	-
Lenovo	ThinkBook 16p G6 IAX BIOS	0 ~ R2CN57WW	-
Lenovo	Legion 7 16IAX10 BIOS	0 ~ RXCN18WW	-
Lenovo	Legion Pro 5 16IAX10 BIOS	0 ~ Q6CN26WW	-
Lenovo	Legion Pro 7 16IAX10H BIOS	0 ~ Q7CN31WW	-
Lenovo	IdeaPad Slim 3 16IRH10R BIOS	0 ~ QDCN23WW	-
Lenovo	Legion 5 15IRX9 BIOS	0 ~ PTCN14WW	-
Lenovo	Lenovo V14 G6 ITN BIOS	0 ~ RHCN20WW	-
Lenovo	Yoga Book 9 14IAH10 BIOS	0 ~ QECN21WW	-
Lenovo	IdeaPad Slim 3 14ITN9 BIOS	0 ~ QUCN20WW	-
Lenovo	IdeaPad Slim 3 16ARP10 BIOS	0 ~ QBCN30WW	-
Lenovo	IdeaPad Pro 5 16ASP10 BIOS	0 ~ R1CN24WW	-
Lenovo	Legion 5 15APH9 BIOS	0 ~ PJCN18WW	-
Lenovo	Yoga 9 2-in-1 14ILL10 BIOS	0 ~ Q9CN22WW	-
Lenovo	Yoga Book 9 13IMU9 BIOS	0 ~ NVCN24WW	-
Lenovo	IdeaPad Pro 5 16IAH10 BIOS	0 ~ PZCN27WW	-
Lenovo	LOQ 15IAX9E BIOS	0 ~ Q8CN17WW	-
Lenovo	Yoga 9 2-in-1 14IMH9 BIOS	0 ~ NNCN31WW	-

二、漏洞 CVE-2026-10587 的公开POC

#	POC 描述	源链接	神龙链接

AI 生成 POC高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2026-10587 的情报信息

请登录查看更多情报信息。

CVE-2026-10587 厂商安全公告 (1)

🔗 Multi-Vendor BIOS Security Vulnerabilities (July 2026) - Lenovo Support USvendor-advisory

https://www.cve.org/CVERecord?id=CVE-2026-10587

同批安全公告 · Lenovo · 2026-07-16 · 共 9 条

CVE-2026-13104	7.3 HIGH	Lenovo app store 权限许可和访问控制问题漏洞
CVE-2026-13103	7.3 HIGH	Lenovo app store 路径遍历漏洞
CVE-2026-9046	7.0 HIGH	Lenovo Legion Zone 权限许可和访问控制问题漏洞
CVE-2026-10589	6.0 MEDIUM	Lenovo BIOS 缓冲区错误漏洞
CVE-2026-6511	5.5 MEDIUM	Lenovo Smart Connect 授权问题漏洞
CVE-2026-10590	4.4 MEDIUM	Lenovo Yoga Pro 7 15IPH11 BIOS 安全漏洞
CVE-2026-10588	4.4 MEDIUM	Lenovo Yoga Pro 7 15IPH11 BIOS 信息泄露漏洞
CVE-2026-14371		Lenovo XClarity Integrator for Microsoft Windows Admin Center 命令注入漏洞

IV. Related Vulnerabilities

Same product: Yoga Pro 7 15IPH11 BIOS

Same vendor: Lenovo

V. Comments for CVE-2026-10587

暂无评论

目标达成感谢每一位支持者 — 我们达成了 100% 目标！

CVE-2026-10587— Lenovo Yoga Pro 7 15IPH11 BIOS 缓冲区错误漏洞

可能的 ATT&CK 技术 1AI

影响版本矩阵 60

一、漏洞 CVE-2026-10587 基础信息

漏洞信息

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

受影响产品

二、漏洞 CVE-2026-10587 的公开POC

三、漏洞 CVE-2026-10587 的情报信息

CVE-2026-10587 厂商安全公告 (1)

同批安全公告 · Lenovo · 2026-07-16 · 共 9 条

IV. Related Vulnerabilities

V. Comments for CVE-2026-10587

发表评论

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

CVE-2026-10587— Lenovo Yoga Pro 7 15IPH11 BIOS 缓冲区错误漏洞

可能的 ATT&CK 技术 1AI

影响版本矩阵 60

一、 漏洞 CVE-2026-10587 基础信息

漏洞信息

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

受影响产品

二、漏洞 CVE-2026-10587 的公开POC

三、漏洞 CVE-2026-10587 的情报信息

CVE-2026-10587 厂商安全公告 (1)

同批安全公告 · Lenovo · 2026-07-16 · 共 9 条

IV. Related Vulnerabilities

V. Comments for CVE-2026-10587

发表评论

目标达成感谢每一位支持者 — 我们达成了 100% 目标！

一、漏洞 CVE-2026-10587 基础信息