Medium severity · published Oct 15, 2026
CVE-2026-92777
A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary…
6.4
CVSS
0.1%
EPSS
No
On KEV
Description
A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code.
CVSS vector
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Physical
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 4% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IT
Idea Tab Pro (TB373FU) · Lenovo
before 17.5.10.057 · source: vendor
IT
Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU) · Lenovo
before 17.5.10.193 · source: vendor
IT
Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU) · Lenovo
before 17.5.10.213 · source: vendor
IT
Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU) · Lenovo
before 17.5.10.210 · source: vendor
LT
Legion Tab (8.8", 3) (TB321FU) · Lenovo
before 17.5.10.170 · source: vendor
LT
Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU/TB311XU) · Lenovo
before 17.5.36.302 · source: vendor
TE
Tab Extreme (TB570FU) · Lenovo
before 17.5.382 · source: vendor
TE
Tab Extreme (TB570ZU/TB570FU) · Lenovo
before 17.5.382 · source: vendor
TK
Tab K11 (TB330FUP) · Lenovo
before 17.0.135 · source: vendor
TK
Tab K11 (TB330XUP) · Lenovo
before 17.0.157 · source: vendor
TK
Tab K11 Plus (TB352FU) · Lenovo
before 17.0.10.296 · source: vendor
TK
Tab K11 Plus (TB352XU) · Lenovo
before 17.0.10.284 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-92777
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-92777
support.lenovo.com
https://support.lenovo.com/us/en/product_security/LEN-221035
More from Idea Tab Pro (TB373FU)
6.8
CVE-2026-89057
A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access