CVE-2026-92777

Severity: medium (CVSS 6.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-16 · updated 2026-10-16
Weakness: CWE-1394

Description

A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code.

Affected products

Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU): before 17.5.10.193 — fixed in 17.5.10.193
Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU): before 17.5.10.213 — fixed in 17.5.10.213
Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU): before 17.5.10.210 — fixed in 17.5.10.210
Lenovo Idea Tab Pro (TB373FU): before 17.5.10.057 — fixed in 17.5.10.057
Lenovo Legion Tab (8.8", 3) (TB321FU): before 17.5.10.170 — fixed in 17.5.10.170
Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU/TB311XU): before 17.5.36.302 — fixed in 17.5.36.302
Lenovo Tab Extreme (TB570FU): before 17.5.382 — fixed in 17.5.382
Lenovo Tab Extreme (TB570ZU/TB570FU): before 17.5.382 — fixed in 17.5.382
Lenovo Tab K11 Plus LTE ROW (TB352XU): before 17.0.10.284 — fixed in 17.0.10.284
Lenovo Tab K11 Plus (TB352FU): before 17.0.10.296 — fixed in 17.0.10.296
Lenovo Tab K11 Plus (TB352XU): before 17.0.10.284 — fixed in 17.0.10.284
Lenovo Tab K11 Plus WIFI ROW: TB352FU: before 17.0.10.296 — fixed in 17.0.10.296
Lenovo Tab K11 (TB330FUP): before 17.0.135 — fixed in 17.0.135
Lenovo Tab K11 (TB330XUP): before 17.0.157 — fixed in 17.0.157
Lenovo Tab K9 (TB305FU): before 17.0.10.216 — fixed in 17.0.10.216
Lenovo Tab K9 (TB305XU): before 17.0.10.129 — fixed in 17.0.10.129
Lenovo Tab M10 5G (TB360ZU): before 16.0.935 — fixed in 16.0.935
Lenovo Tab M11 (TB330FU): before 17.0.135 — fixed in 17.0.135
Lenovo Tab M11 (TB330XU): before 17.0.517 — fixed in 17.0.517
Lenovo Tab One (TB305FU): before 17.0.10.216 — fixed in 17.0.10.216
Lenovo Tab One (TB305XU): before 17.0.10.129 — fixed in 17.0.10.129
Lenovo Tab P12 (TB370FU): before 17.0.280 — fixed in 17.0.280
Lenovo Tab Plus (TB351FU): before 17.5.10.199 — fixed in 17.5.10.199
Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU): before 17.5.36.302 — fixed in 17.5.36.302
Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311XU): before 17.5.37.216 — fixed in 17.5.37.216
Lenovo Yoga Tab Plus (TB520FU): before 17.5.10.309 — fixed in 17.5.10.309
Lenovo Yoga Tab (TB710FU): before 17.5.04.059 — fixed in 17.5.04.059

How to fix

Upgrade to a fixed version: Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU) 17.5.10.193; Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU) 17.5.10.213; Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU) 17.5.10.210; Lenovo Idea Tab Pro (TB373FU) 17.5.10.057; Lenovo Legion Tab (8.8", 3) (TB321FU) 17.5.10.170; Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU/TB311XU) 17.5.36.302; Lenovo Tab Extreme (TB570FU) 17.5.382; Lenovo Tab Extreme (TB570ZU/TB570FU) 17.5.382; Lenovo Tab K11 Plus LTE ROW (TB352XU) 17.0.10.284; Lenovo Tab K11 Plus (TB352FU) 17.0.10.296; Lenovo Tab K11 Plus (TB352XU) 17.0.10.284; Lenovo Tab K11 Plus WIFI ROW: TB352FU 17.0.10.296. Check the vendor advisory for mitigations.

References

https://support.lenovo.com/us/en/product_security/LEN-221035

Get alerted when CVE-2026-92777 or the next vulnerability affects your stack