CVE-2026-10587
MediumCVSS 6.0Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode.
Risk Assessment
An attacker could gain unauthorized access to critical hardware settings, potentially destabilizing the system or enabling further low-level attacks.
Recommendation
Apply the latest security patches provided by the hardware or firmware vendor and restrict access to privileged accounts.
Other vulnerabilities in System Management Mode
See all- CVE-2026-10589Medium
A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Management Mode.
- CVE-2026-10588Medium
A vulnerability allows a local privileged attacker to disclose the address of protected System Management Mode (SMM) memory.
- CVE-2024-36343Medium
Improper input validation in SMM communications buffer could allow a privileged attacker to perform out-of-bounds read/write in TSEG memory, potentially compromising confidentiality or integrity.
Original NVD description (English source)
A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode.