CVE-2026-10589
MediumCVSS 6.0Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Management Mode.
Risk Assessment
The risk involves potential takeover of the highest privileged processor mode, which could lead to complete system compromise and persistent malware concealment.
Recommendation
It is recommended to immediately apply security patches provided by the hardware or software vendor and restrict local access to trusted users.
Other vulnerabilities in System Management Mode
See all- CVE-2026-10588Medium
A vulnerability allows a local privileged attacker to disclose the address of protected System Management Mode (SMM) memory.
- CVE-2026-10587Medium
A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Management Mode.
- CVE-2024-36343Medium
Improper input validation in SMM communications buffer could allow a privileged attacker to perform out-of-bounds read/write in TSEG memory, potentially compromising confidentiality or integrity.
Original NVD description (English source)
A potential out of bounds write vulnerability could allow a local privileged attacker to execute code in System Management Mode.