Yoga 9 2-in-1 14ill10 Bios (Lenovo) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-07-16. Vendor: Lenovo.

CVEs of Yoga 9 2-in-1 14ill10 Bios

• CVE-2026-10590 - CVSS 6.7 (medium), 2026-07-16: A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management…
• CVE-2026-10589 - CVSS 6.8 (medium), 2026-07-16: A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Management Mode.
• CVE-2026-10588 - CVSS 6.7 (medium), 2026-07-16: A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory.
• CVE-2026-10587 - CVSS 6.8 (medium), 2026-07-16: A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode.