Lenovo Yoga 9 14IRP8 BIOS

• CVE-2026-10590 Medium 4.4 A potential missing authentication vulnerability could allow a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler. 0.2%
• CVE-2026-10589 Medium 6.0 A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Management Mode. 0.2%
• CVE-2026-10588 Medium 4.4 A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory. 0.2%
• CVE-2026-10587 Medium 6.0 A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode. 0.1%