CVE-2026-10588
MediumCVSS 4.4Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
A vulnerability allows a local privileged attacker to disclose the address of protected System Management Mode (SMM) memory.
Risk Assessment
The risk involves potential information disclosure about the location of critical SMM memory, which could facilitate further attacks on low-level system security mechanisms.
Recommendation
Apply the appropriate security patch from the hardware or firmware vendor and restrict local system access to trusted users only.
Other vulnerabilities in System Management Mode
See all- CVE-2026-10589Medium
A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Management Mode.
- CVE-2026-10587Medium
A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode.
- CVE-2024-36343Medium
Improper input validation in SMM communications buffer could allow a privileged attacker to perform out-of-bounds read/write in TSEG memory, potentially compromising confidentiality or integrity.
Original NVD description (English source)
A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory.