Medium WID-SEC-2026-2349 5 CVEs

Lenovo BIOS: Mehrere Schwachstellen

Published Jul 14, 2026 · Updated Jul 16, 2026 · Revision 2 · de-DE

Vendor: Lenovo Product: BIOS Product: Computer

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen im BIOS verschiedener Lenovo Computermodelle ausnutzen, um Code auszuführen, Daten zu manipulieren, Informationen offenzulegen, einen Denial of Service zu verursachen und Privilegien zu erweitern.

Product

Das BIOS ist die Firmware bei IBM PC kompatiblen Computern.
Lenovo ist ein Hersteller u. a. von Computern.

Vulnerabilities 5

High 7.8

CVE-2026-25271

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

Memory Corruption when processing asynchronous input parameters due to improper handling of modified values between check and use.

Qualcomm Snapdragon

Jul 6, 2026
Medium 6.0

CVE-2026-10587

A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settin…

Lenovo Lenovo V15 G4 AMN BIOS IdeaPad Slim 3 15AMN8 BIOS Lenovo V15 G2 IJL Laptop BIOS

Jul 16, 2026
Medium 6.0

CVE-2026-10589

A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Managem…

Lenovo IdeaPad Slim 3 15AMN8 BIOS Lenovo V15 G4 AMN BIOS Lenovo S14 G3 IAP BIOS

Jul 16, 2026
Medium 4.4

CVE-2026-10588

A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Managemen…

Lenovo IdeaPad Slim 3 15AMN8 BIOS Lenovo V15 G4 AMN BIOS Legion 5 15IAX10 BIOS

Jul 16, 2026
Medium 4.4

CVE-2026-10590

A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitra…

Lenovo Lenovo V15 G4 AMN BIOS IdeaPad Slim 3 15AMN8 BIOS Legion Pro 7 16ADR10H BIOS

Jul 16, 2026

Revision history

2026-07-16 #2
Referenz(en) aufgenommen: EUVD-2026-44982, EUVD-2026-44979, EUVD-2026-44980, EUVD-2026-44981
2026-07-14 #1
Initiale Fassung

References

Lenovo Security Advisory LEN-220440 vom 2026-07-14
https://support.lenovo.com/us/en/product_security/LEN-220440