CVE-2026-92777 PUBLISHED

Assigner: lenovo
Reserved: 16.09.2026 Published: 15.10.2026 Updated: 15.10.2026

A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code.

Metrics

CVSS Vector: CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS Score: 5.4

Product Status

Vendor Lenovo
Product Idea Tab Pro (TB373FU)
Versions Default: unaffected
  • affected from 0 to 17.5.10.057 (excl.)
Vendor Lenovo
Product Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU)
Versions Default: unaffected
  • affected from 0 to 17.5.10.193 (excl.)
Vendor Lenovo
Product Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU)
Versions Default: unaffected
  • affected from 0 to 17.5.10.213 (excl.)
Vendor Lenovo
Product Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU)
Versions Default: unaffected
  • affected from 0 to 17.5.10.210 (excl.)
Vendor Lenovo
Product Legion Tab (8.8", 3) (TB321FU)
Versions Default: unaffected
  • affected from 0 to 17.5.10.170 (excl.)
Vendor Lenovo
Product Tab M11 (TB330FU)
Versions Default: unaffected
  • affected from 0 to 17.0.135 (excl.)
Vendor Lenovo
Product Tab M11 (TB330XU)
Versions Default: unaffected
  • affected from 0 to 17.0.517 (excl.)
Vendor Lenovo
Product Tab Extreme (TB570FU)
Versions Default: unaffected
  • affected from 0 to 17.5.382 (excl.)
Vendor Lenovo
Product Tab Extreme (TB570ZU/TB570FU)
Versions Default: unaffected
  • affected from 0 to 17.5.382 (excl.)
Vendor Lenovo
Product Tab K11 (TB330FUP)
Versions Default: unaffected
  • affected from 0 to 17.0.135 (excl.)
Vendor Lenovo
Product Tab K11 (TB330XUP)
Versions Default: unaffected
  • affected from 0 to 17.0.157 (excl.)
Vendor Lenovo
Product Tab K11 Plus (TB352FU)
Versions Default: unaffected
  • affected from 0 to 17.0.10.296 (excl.)
Vendor Lenovo
Product Tab K11 Plus (TB352XU)
Versions Default: unaffected
  • affected from 0 to 17.0.10.284 (excl.)
Vendor Lenovo
Product Tab K11 Plus LTE ROW (TB352XU)
Versions Default: unaffected
  • affected from 0 to 17.0.10.284 (excl.)
Vendor Lenovo
Product Tab K11 Plus WIFI ROW: TB352FU
Versions Default: unaffected
  • affected from 0 to 17.0.10.296 (excl.)
Vendor Lenovo
Product Tab M10 5G (TB360ZU)
Versions Default: unaffected
  • affected from 0 to 16.0.935 (excl.)
Vendor Lenovo
Product Tab K9 (TB305FU)
Versions Default: unaffected
  • affected from 0 to 17.0.10.216 (excl.)
Vendor Lenovo
Product Tab K9 (TB305XU)
Versions Default: unaffected
  • affected from 0 to 17.0.10.129 (excl.)
Vendor Lenovo
Product Tab One (TB305FU)
Versions Default: unaffected
  • affected from 0 to 17.0.10.216 (excl.)
Vendor Lenovo
Product Tab One (TB305XU)
Versions Default: unaffected
  • affected from 0 to 17.0.10.129 (excl.)
Vendor Lenovo
Product Tab P12 (TB370FU)
Versions Default: unaffected
  • affected from 0 to 17.0.280 (excl.)
Vendor Lenovo
Product Tab Plus (TB351FU)
Versions Default: unaffected
  • affected from 0 to 17.5.10.199 (excl.)
Vendor Lenovo
Product Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU)
Versions Default: unaffected
  • affected from 0 to 17.5.36.302 (excl.)
Vendor Lenovo
Product Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU/TB311XU)
Versions Default: unaffected
  • affected from 0 to 17.5.36.302 (excl.)
Vendor Lenovo
Product Tab with Clear Case/ Lenovo Tab with Folio Case (TB311XU)
Versions Default: unaffected
  • affected from 0 to 17.5.37.216 (excl.)
Vendor Lenovo
Product Yoga Tab (TB710FU)
Versions Default: unaffected
  • affected from 0 to 17.5.04.059 (excl.)
Vendor Lenovo
Product Yoga Tab Plus (TB520FU)
Versions Default: unaffected
  • affected from 0 to 17.5.10.309 (excl.)

Solutions

Update to the version (or newer) indicated for your model in the advisory - https://support.lenovo.com/us/en/product_security/LEN-221035

Credits

  • Lenovo thanks Masayoshi Matsubara for reporting this issue. finder

References

Problem Types

  • CWE-1394: Use of Default Cryptographic Key CWE