CVE-2026-92777
Medium
Description
A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code.
SeverityMedium
CVSS6.4
Exploit probability—
ProductLenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU/TB311XU)
PublishedOct 16, 2026
First seenOct 16, 2026
Weakness typeCWE-1394CWE-1394
How to fix
Update
- Lenovo Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU/TB311XU)17.5.36.302 or later
- Lenovo Idea Tab Pro (TB373FU)17.5.10.057 or later
- Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU)17.5.10.193 or later
- Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU)17.5.10.213 or later
- Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU)17.5.10.210 or later
- Lenovo Legion Tab (8.8", 3) (TB321FU)17.5.10.170 or later
- Lenovo Tab M11 (TB330FU)17.0.135 or later
- Lenovo Tab M11 (TB330XU)17.0.517 or later
- Lenovo Tab Extreme (TB570FU)17.5.382 or later
- Lenovo Tab Extreme (TB570ZU/TB570FU)17.5.382 or later
- Lenovo Tab K11 (TB330FUP)17.0.135 or later
- Lenovo Tab K11 (TB330XUP)17.0.157 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Lenovo Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU/TB311XU) | v < 17.5.36.302 | 17.5.36.302 |
| Lenovo Idea Tab Pro (TB373FU) | v < 17.5.10.057 | 17.5.10.057 |
| Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU) | v < 17.5.10.193 | 17.5.10.193 |
| Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU) | v < 17.5.10.213 | 17.5.10.213 |
| Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU) | v < 17.5.10.210 | 17.5.10.210 |
| Lenovo Legion Tab (8.8", 3) (TB321FU) | v < 17.5.10.170 | 17.5.10.170 |
| Lenovo Tab M11 (TB330FU) | v < 17.0.135 | 17.0.135 |
| Lenovo Tab M11 (TB330XU) | v < 17.0.517 | 17.0.517 |
| Lenovo Tab Extreme (TB570FU) | v < 17.5.382 | 17.5.382 |
| Lenovo Tab Extreme (TB570ZU/TB570FU) | v < 17.5.382 | 17.5.382 |
| Lenovo Tab K11 (TB330FUP) | v < 17.0.135 | 17.0.135 |
| Lenovo Tab K11 (TB330XUP) | v < 17.0.157 | 17.0.157 |
| Lenovo Tab K11 Plus (TB352FU) | v < 17.0.10.296 | 17.0.10.296 |
| Lenovo Tab K11 Plus (TB352XU) | v < 17.0.10.284 | 17.0.10.284 |
| Lenovo Tab K11 Plus LTE ROW (TB352XU) | v < 17.0.10.284 | 17.0.10.284 |
| Lenovo Tab K11 Plus WIFI ROW: TB352FU | v < 17.0.10.296 | 17.0.10.296 |
| Lenovo Tab M10 5G (TB360ZU) | v < 16.0.935 | 16.0.935 |
| Lenovo Tab K9 (TB305FU) | v < 17.0.10.216 | 17.0.10.216 |
| Lenovo Tab K9 (TB305XU) | v < 17.0.10.129 | 17.0.10.129 |
| Lenovo Tab One (TB305FU) | v < 17.0.10.216 | 17.0.10.216 |
| Lenovo Tab One (TB305XU) | v < 17.0.10.129 | 17.0.10.129 |
| Lenovo Tab P12 (TB370FU) | v < 17.0.280 | 17.0.280 |
| Lenovo Tab Plus (TB351FU) | v < 17.5.10.199 | 17.5.10.199 |
| Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU) | v < 17.5.36.302 | 17.5.36.302 |
| Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311XU) | v < 17.5.37.216 | 17.5.37.216 |
| Lenovo Yoga Tab (TB710FU) | v < 17.5.04.059 | 17.5.04.059 |
| Lenovo Yoga Tab Plus (TB520FU) | v < 17.5.10.309 | 17.5.10.309 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.