---
id: CVE-2026-92777
title: >-
  A potential vulnerability was reported in some Lenovo Tablets that could allow
  a user with physical access to an unlocked tablet to bypass device protections
  and execute arbitrary code.
summary: >-
  A potential vulnerability was reported in some Lenovo Tablets that could allow
  a user with physical access to an unlocked tablet to bypass device protections
  and execute arbitrary code.
severity: medium
cvss: 6.4
cvssVector: 'CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-1394
vendor: Lenovo
product: Idea Tab Pro (TB373FU)
affected:
  - idea_tab_pro_tb373fu < 17.5.10.057
  - idea_tab_lenovo_tab_k11_gen_2_tb336fu < 17.5.10.193
  - idea_tab_lenovo_tab_k11_gen_2_tb336fu_tb336zu < 17.5.10.213
  - idea_tab_lenovo_tab_k11_gen_2_tb336zu < 17.5.10.210
  - legion_tab_8.8_3_tb321fu < 17.5.10.170
  - tab_m11_tb330fu < 17.0.135
  - tab_m11_tb330xu < 17.0.517
  - tab_extreme_tb570fu < 17.5.382
  - tab_extreme_tb570zu_tb570fu < 17.5.382
  - tab_k11_tb330fup < 17.0.135
  - tab_k11_tb330xup < 17.0.157
  - tab_k11_plus_tb352fu < 17.0.10.296
  - tab_k11_plus_tb352xu < 17.0.10.284
  - tab_k11_plus_lte_row_tb352xu < 17.0.10.284
  - tab_k11_plus_wifi_row_tb352fu < 17.0.10.296
  - tab_m10_5g_tb360zu < 16.0.935
  - tab_k9_tb305fu < 17.0.10.216
  - tab_k9_tb305xu < 17.0.10.129
  - tab_one_tb305fu < 17.0.10.216
  - tab_one_tb305xu < 17.0.10.129
  - tab_p12_tb370fu < 17.0.280
  - tab_plus_tb351fu < 17.5.10.199
  - tab_with_clear_case_lenovo_tab_with_folio_case_tb311fu < 17.5.36.302
  - tab_with_clear_case_lenovo_tab_with_folio_case_tb311fu_tb311xu < 17.5.36.302
  - tab_with_clear_case_lenovo_tab_with_folio_case_tb311xu < 17.5.37.216
  - yoga_tab_tb710fu < 17.5.04.059
  - yoga_tab_plus_tb520fu < 17.5.10.309
published: '2026-10-16'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T19:55:59.740'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-92777'
references:
  - url: 'https://support.lenovo.com/us/en/product_security/LEN-221035'
    label: psirt@lenovo.com
tags:
  - nvd
  - cve.org
epss: 0.00147
epssPercentile: 0.03861
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-16T16:30:32.813048Z'
ingestedAt: '2026-10-15T23:54:16.911Z'
---

## Overview

A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.