CVE-2026-89057: Idea Tab Pro (TB373FU) 0 to before 17.5.10.107; +30 more affected products

Affected technology

Idea Tab Pro (TB373FU) · 0 to before 17.5.10.107
Lenovo

Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU) · 0 to before 17.5.10.348
Lenovo

Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU) · 0 to before TB336FU：17.5.10.348 ,TB336ZU：17.5.10.354
Lenovo

Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU) · 0 to before 17.5.10.354
Lenovo

Legion Tab (8.8", 3) (TB321FU) · 0 to before 17.5.10.319
Lenovo

Tab M11 (TB330FU) · 0 to before 17.0.135
Lenovo

Tab M11 (TB330FU/TB330XU) · 0 to before 17.0.517
Lenovo

Tab M11 (TB330XU) · 0 to before 17.0.517
Lenovo

Tab Extreme (TB570FU) · 0 to before 17.5.589
Lenovo

Tab Extreme (TB570ZU) · 0 to before 17.5.589
Lenovo

Tab Extreme (TB570ZU/TB570FU) · 0 to before 17.5.589
Lenovo

Tab K11 (TB330FUP) · 0 to before 17.0.135
Lenovo

Tab K11 (TB330XUP) · 0 to before 17.0.157
Lenovo

Tab K11 Plus (TB352FU) · 0 to before 17.0.10.344
Lenovo

Tab K11 Plus (TB352XU) · 0 to before 17.0.10.336
Lenovo

Tab K11 Plus LTE ROW (TB352XU) · 0 to before 17.0.10.336
Lenovo

Tab K11 Plus WIFI ROW: TB352FU · 0 to before 17.0.10.344
Lenovo

Tab M10 5G (TB360ZU) · 0 to before 16.0.939
Lenovo

Tab K9 (TB305FU) · 0 to before 17.0.10.324
Lenovo

Tab K9 (TB305XU) · 0 to before 17.0.10.318
Lenovo

Tab One (TB305FU) · 0 to before 17.0.10.324
Lenovo

Tab One (TB305XU) · 0 to before 17.0.10.254
Lenovo

Tab P12 (TB370FU) · 0 to before 17.0.352
Lenovo

Tab P12 (TB370FU/TB372FU) · 0 to before TB370FU：17.0.352, TB372FC：17.0.223
Lenovo

Tab P12 (TB372FU) · 0 to before 17.0.223
Lenovo

Tab Plus (TB351FU) · 0 to before 17.5.10.199
Lenovo

Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU) · 0 to before 17.5.36.417
Lenovo

Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU/TB311XU) · 0 to before TB311FU：17.5.36.417 ,TB311XU：17.5.37.350
Lenovo

Tab with Clear Case/ Lenovo Tab with Folio Case (TB311XU) · 0 to before 17.5.37.350
Lenovo

Yoga Tab (TB710FU) · 0 to before 17.5.04.082
Lenovo

Yoga Tab Plus (TB520FU) · 0 to before 17.5.10.362
Lenovo

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Physical access · No privileges required · No user interaction required

What an attacker can do

A user with physical access could gain unauthorized device access. Vendor/CNA’s CVSS 4.0 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high.