---
id: CVE-2026-92777
title: >-
  A potential vulnerability was reported in some Lenovo Tablets that could allow
  a user with physical access to an unlocked tablet to bypass device protections
  and execute arbitrary code.
summary: >-
  A potential vulnerability was reported in some Lenovo Tablets that could allow
  a user with physical access to an unlocked tablet to bypass device protections
  and execute arbitrary code.
severity: medium
cvss: 6.4
cvssVector: 'CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-1394
vendor: Lenovo
product: Idea Tab Pro (TB373FU)
affected:
  - idea_tab_pro_tb373fu < 17.5.10.057
  - idea_tab_lenovo_tab_k11_gen_2_tb336fu < 17.5.10.193
  - idea_tab_lenovo_tab_k11_gen_2_tb336fu_tb336zu < 17.5.10.213
  - idea_tab_lenovo_tab_k11_gen_2_tb336zu < 17.5.10.210
  - legion_tab_8.8_3_tb321fu < 17.5.10.170
  - tab_m11_tb330fu < 17.0.135
  - tab_m11_tb330xu < 17.0.517
  - tab_extreme_tb570fu < 17.5.382
  - tab_extreme_tb570zu_tb570fu < 17.5.382
  - tab_k11_tb330fup < 17.0.135
  - tab_k11_tb330xup < 17.0.157
  - tab_k11_plus_tb352fu < 17.0.10.296
  - tab_k11_plus_tb352xu < 17.0.10.284
  - tab_k11_plus_lte_row_tb352xu < 17.0.10.284
  - tab_k11_plus_wifi_row_tb352fu < 17.0.10.296
  - tab_m10_5g_tb360zu < 16.0.935
  - tab_k9_tb305fu < 17.0.10.216
  - tab_k9_tb305xu < 17.0.10.129
  - tab_one_tb305fu < 17.0.10.216
  - tab_one_tb305xu < 17.0.10.129
  - tab_p12_tb370fu < 17.0.280
  - tab_plus_tb351fu < 17.5.10.199
  - tab_with_clear_case_lenovo_tab_with_folio_case_tb311fu < 17.5.36.302
  - tab_with_clear_case_lenovo_tab_with_folio_case_tb311fu_tb311xu < 17.5.36.302
  - tab_with_clear_case_lenovo_tab_with_folio_case_tb311xu < 17.5.37.216
  - yoga_tab_tb710fu < 17.5.04.059
  - yoga_tab_plus_tb520fu < 17.5.10.309
published: '2026-10-15'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T23:18:01.762Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-92777'
references:
  - url: 'https://support.lenovo.com/us/en/product_security/LEN-221035'
tags:
  - cve.org
ingestedAt: '2026-10-15T23:54:16.911Z'
---

## Overview

A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code.

## Affected

- `idea_tab_pro_tb373fu < 17.5.10.057`
- `idea_tab_lenovo_tab_k11_gen_2_tb336fu < 17.5.10.193`
- `idea_tab_lenovo_tab_k11_gen_2_tb336fu_tb336zu < 17.5.10.213`
- `idea_tab_lenovo_tab_k11_gen_2_tb336zu < 17.5.10.210`
- `legion_tab_8.8_3_tb321fu < 17.5.10.170`
- `tab_m11_tb330fu < 17.0.135`
- `tab_m11_tb330xu < 17.0.517`
- `tab_extreme_tb570fu < 17.5.382`
- `tab_extreme_tb570zu_tb570fu < 17.5.382`
- `tab_k11_tb330fup < 17.0.135`
- `tab_k11_tb330xup < 17.0.157`
- `tab_k11_plus_tb352fu < 17.0.10.296`
- `tab_k11_plus_tb352xu < 17.0.10.284`
- `tab_k11_plus_lte_row_tb352xu < 17.0.10.284`
- `tab_k11_plus_wifi_row_tb352fu < 17.0.10.296`
- `tab_m10_5g_tb360zu < 16.0.935`
- `tab_k9_tb305fu < 17.0.10.216`
- `tab_k9_tb305xu < 17.0.10.129`
- `tab_one_tb305fu < 17.0.10.216`
- `tab_one_tb305xu < 17.0.10.129`
- `tab_p12_tb370fu < 17.0.280`
- `tab_plus_tb351fu < 17.5.10.199`
- `tab_with_clear_case_lenovo_tab_with_folio_case_tb311fu < 17.5.36.302`
- `tab_with_clear_case_lenovo_tab_with_folio_case_tb311fu_tb311xu < 17.5.36.302`
- `tab_with_clear_case_lenovo_tab_with_folio_case_tb311xu < 17.5.37.216`
- `yoga_tab_tb710fu < 17.5.04.059`
- `yoga_tab_plus_tb520fu < 17.5.10.309`

## Remediation

Update to the version (or newer) indicated for your model in the advisory - https://support.lenovo.com/us/en/product_security/LEN-221035