CVE-2026-92777

Medium

Description

A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code.

SeverityMedium
CVSS6.4
Exploit probability—
ProductLenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU/TB311XU)
PublishedOct 16, 2026
First seenOct 16, 2026
Weakness typeCWE-1394CWE-1394

How to fix

Update
  • Lenovo Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU/TB311XU)17.5.36.302 or later
  • Lenovo Idea Tab Pro (TB373FU)17.5.10.057 or later
  • Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU)17.5.10.193 or later
  • Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU)17.5.10.213 or later
  • Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU)17.5.10.210 or later
  • Lenovo Legion Tab (8.8", 3) (TB321FU)17.5.10.170 or later
  • Lenovo Tab M11 (TB330FU)17.0.135 or later
  • Lenovo Tab M11 (TB330XU)17.0.517 or later
  • Lenovo Tab Extreme (TB570FU)17.5.382 or later
  • Lenovo Tab Extreme (TB570ZU/TB570FU)17.5.382 or later
  • Lenovo Tab K11 (TB330FUP)17.0.135 or later
  • Lenovo Tab K11 (TB330XUP)17.0.157 or later

Affected products

ProductAffected versionsFixed in
Lenovo Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU/TB311XU)v < 17.5.36.30217.5.36.302
Lenovo Idea Tab Pro (TB373FU)v < 17.5.10.05717.5.10.057
Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU)v < 17.5.10.19317.5.10.193
Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU)v < 17.5.10.21317.5.10.213
Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU)v < 17.5.10.21017.5.10.210
Lenovo Legion Tab (8.8", 3) (TB321FU)v < 17.5.10.17017.5.10.170
Lenovo Tab M11 (TB330FU)v < 17.0.13517.0.135
Lenovo Tab M11 (TB330XU)v < 17.0.51717.0.517
Lenovo Tab Extreme (TB570FU)v < 17.5.38217.5.382
Lenovo Tab Extreme (TB570ZU/TB570FU)v < 17.5.38217.5.382
Lenovo Tab K11 (TB330FUP)v < 17.0.13517.0.135
Lenovo Tab K11 (TB330XUP)v < 17.0.15717.0.157
Lenovo Tab K11 Plus (TB352FU)v < 17.0.10.29617.0.10.296
Lenovo Tab K11 Plus (TB352XU)v < 17.0.10.28417.0.10.284
Lenovo Tab K11 Plus LTE ROW (TB352XU)v < 17.0.10.28417.0.10.284
Lenovo Tab K11 Plus WIFI ROW: TB352FUv < 17.0.10.29617.0.10.296
Lenovo Tab M10 5G (TB360ZU)v < 16.0.93516.0.935
Lenovo Tab K9 (TB305FU)v < 17.0.10.21617.0.10.216
Lenovo Tab K9 (TB305XU)v < 17.0.10.12917.0.10.129
Lenovo Tab One (TB305FU)v < 17.0.10.21617.0.10.216
Lenovo Tab One (TB305XU)v < 17.0.10.12917.0.10.129
Lenovo Tab P12 (TB370FU)v < 17.0.28017.0.280
Lenovo Tab Plus (TB351FU)v < 17.5.10.19917.5.10.199
Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU)v < 17.5.36.30217.5.36.302
Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311XU)v < 17.5.37.21617.5.37.216
Lenovo Yoga Tab (TB710FU)v < 17.5.04.05917.5.04.059
Lenovo Yoga Tab Plus (TB520FU)v < 17.5.10.30917.5.10.309

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.