Security Flaw in Lenovo Tablets Allows Code Execution by Local Users
CVE-2026-92777

5.4MEDIUM

Key Information:

Vendor

Lenovo
Status
Idea Tab Pro (tb373fu)
Idea Tab/ Lenovo Tab K11 Gen 2 (tb336fu)
Idea Tab/ Lenovo Tab K11 Gen 2 (tb336fu/tb336zu)
Idea Tab/ Lenovo Tab K11 Gen 2 (tb336zu)
Vendor
CVE Published:
15 October 2026

What is CVE-2026-92777?

A security flaw was identified in Lenovo Tablets that could permit individuals with physical access to the device to bypass existing security measures. This vulnerability enables a local user to execute arbitrary code on the device, which could lead to unauthorized actions or data compromise. Users are advised to secure their tablets and remain aware of potential threats associated with physical access.

Affected Version(s)

Idea Tab Pro (TB373FU) 0 < 17.5.10.057

Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU) 0 < 17.5.10.193

Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU) 0 < 17.5.10.213

References

https://support.lenovo.com/us/en/product_security/LEN-221035
vendor-advisory

CVSS V4

Score:
5.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Lenovo thanks Masayoshi Matsubara for reporting this issue.
.