Riskcovery

CVE-2026-92777

State
Published
Severity
5.4 Medium
Published
Oct 15, 2026
Updated
Oct 16, 2026
Reserved
Sep 16, 2026

Read the record on cve.org

Description

A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code.

Scores

CVSSScoreVectorSource
4.05.4 MediumCVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:Nlenovo
3.16.4 MediumCVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hlenovo

Weaknesses

  • CWE-1394 Use of Default Cryptographic Key

Affected Products

ProductVersions
Idea Tab Pro (TB373FU)Lenovo
  • before 17.5.10.057Affected
Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU)Lenovo
  • before 17.5.10.193Affected
Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU)Lenovo
  • before 17.5.10.213Affected
Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU)Lenovo
  • before 17.5.10.210Affected
Legion Tab (8.8", 3) (TB321FU)Lenovo
  • before 17.5.10.170Affected
Tab M11 (TB330FU)Lenovo
  • before 17.0.135Affected
Tab M11 (TB330XU)Lenovo
  • before 17.0.517Affected
Tab Extreme (TB570FU)Lenovo
  • before 17.5.382Affected
Tab Extreme (TB570ZU/TB570FU)Lenovo
  • before 17.5.382Affected
Tab K11 (TB330FUP)Lenovo
  • before 17.0.135Affected
Tab K11 (TB330XUP)Lenovo
  • before 17.0.157Affected
Tab K11 Plus (TB352FU)Lenovo
  • before 17.0.10.296Affected
Tab K11 Plus (TB352XU)Lenovo
  • before 17.0.10.284Affected
Tab K11 Plus LTE ROW (TB352XU)Lenovo
  • before 17.0.10.284Affected
Tab K11 Plus WIFI ROW: TB352FULenovo
  • before 17.0.10.296Affected
Tab M10 5G (TB360ZU)Lenovo
  • before 16.0.935Affected
Tab K9 (TB305FU)Lenovo
  • before 17.0.10.216Affected
Tab K9 (TB305XU)Lenovo
  • before 17.0.10.129Affected
Tab One (TB305FU)Lenovo
  • before 17.0.10.216Affected
Tab One (TB305XU)Lenovo
  • before 17.0.10.129Affected
Tab P12 (TB370FU)Lenovo
  • before 17.0.280Affected
Tab Plus (TB351FU)Lenovo
  • before 17.5.10.199Affected
Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU)Lenovo
  • before 17.5.36.302Affected
Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU/TB311XU)Lenovo
  • before 17.5.36.302Affected
Tab with Clear Case/ Lenovo Tab with Folio Case (TB311XU)Lenovo
  • before 17.5.37.216Affected
Yoga Tab (TB710FU)Lenovo
  • before 17.5.04.059Affected
Yoga Tab Plus (TB520FU)Lenovo
  • before 17.5.10.309Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.