Medium severity · published Nov 3, 2025
CVE-2025-11193
A potential vulnerability was reported in some Lenovo Tablets that could allow a local authenticated user or application to gain access to sensitive device specific information
5.5
CVSS
0.1%
EPSS
No
On KEV
Description
A potential vulnerability was reported in some Lenovo Tablets that could allow a local authenticated user or application to gain access to sensitive device specific information.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 2% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IT
Idea Tab Pro TB373FU · Lenovo
before 17.0.04.184 · source: vendor
TE
Tab Extreme TB570ZU TB570FU · Lenovo
before 17.0.104 · source: vendor
TK
Tab K11 Plus LTE TB352FU TB352XU · Lenovo
before 17.0.10.213 · source: vendor
TK
Tab K11 Plus WIFI TB352FU · Lenovo
before 17.0.10.213 · source: vendor
TK
Tab K11 TB330FU TB330FUP TB330XU TB330XUP · Lenovo
before TB330FU_ROW_OPEN_USER_V5_V_ZUI_17.0.274_ST_251011; before TB330XU_ROW_OPEN_USER_V5_V_ZUI_17.0.235_ST_251011 · source: vendor
TK
Tab K9 TB305FU · Lenovo
before 17.0.10.069 · source: vendor
TK
Tab K9 TB305XU · Lenovo
before 17.0.10.065 · source: vendor
TM
Tab M10 5G TB360ZU · Lenovo
before 16.0.783 · source: vendor
TM
Tab M11 TB330FU TB330XU · Lenovo
before TB330FU_ROW_OPEN_USER_V5_V_ZUI_17.0.274_ST_251011; before TB330XU_ROW_OPEN_USER_V5_V_ZUI_17.0.235_ST_251011 · source: vendor
TM
Tab M8 4th Gen 2024 TB301FU TB301XU · Lenovo
before TB300FU_USR_S101112_250919_MP1V1111_ROW; before TB300XU_USR_S101103_250919_MP1V1111_ROW · source: vendor
TM
Tab M8 4th Gen TB300FU TB300XU · Lenovo
before TB300FU_USR_S101112_250919_MP1V1111_ROW; before TB300XU_USR_S101103_250919_MP1V1111_ROW · source: vendor
TM
Tab M9 TB310FU TB310XU · Lenovo
before TB310FU_USR_S000912_2510022135_mp1V969_ROW; before TB310XU_USR_S000913_2510021921_mp1V969_ROW · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-11193
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-11193
support.lenovo.com
https://support.lenovo.com/us/en/product_security/LEN-202383
More from Idea Tab Pro TB373FU
6.8
CVE-2026-89057
A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access
6.4
CVE-2026-92777
A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary…
3.2
CVE-2025-14058
A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify Control Center settings…