CVE-2026-92777: Idea Tab Pro (TB373FU) 0 to before 17.5.10.057; +26 more affected products

Affected technology

Idea Tab Pro (TB373FU) · 0 to before 17.5.10.057
Lenovo

Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU) · 0 to before 17.5.10.193
Lenovo

Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU) · 0 to before 17.5.10.213
Lenovo

Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU) · 0 to before 17.5.10.210
Lenovo

Legion Tab (8.8", 3) (TB321FU) · 0 to before 17.5.10.170
Lenovo

Tab M11 (TB330FU) · 0 to before 17.0.135
Lenovo

Tab M11 (TB330XU) · 0 to before 17.0.517
Lenovo

Tab Extreme (TB570FU) · 0 to before 17.5.382
Lenovo

Tab Extreme (TB570ZU/TB570FU) · 0 to before 17.5.382
Lenovo

Tab K11 (TB330FUP) · 0 to before 17.0.135
Lenovo

Tab K11 (TB330XUP) · 0 to before 17.0.157
Lenovo

Tab K11 Plus (TB352FU) · 0 to before 17.0.10.296
Lenovo

Tab K11 Plus (TB352XU) · 0 to before 17.0.10.284
Lenovo

Tab K11 Plus LTE ROW (TB352XU) · 0 to before 17.0.10.284
Lenovo

Tab K11 Plus WIFI ROW: TB352FU · 0 to before 17.0.10.296
Lenovo

Tab M10 5G (TB360ZU) · 0 to before 16.0.935
Lenovo

Tab K9 (TB305FU) · 0 to before 17.0.10.216
Lenovo

Tab K9 (TB305XU) · 0 to before 17.0.10.129
Lenovo

Tab One (TB305FU) · 0 to before 17.0.10.216
Lenovo

Tab One (TB305XU) · 0 to before 17.0.10.129
Lenovo

Tab P12 (TB370FU) · 0 to before 17.0.280
Lenovo

Tab Plus (TB351FU) · 0 to before 17.5.10.199
Lenovo

Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU) · 0 to before 17.5.36.302
Lenovo

Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case (TB311FU/TB311XU) · 0 to before 17.5.36.302
Lenovo

Tab with Clear Case/ Lenovo Tab with Folio Case (TB311XU) · 0 to before 17.5.37.216
Lenovo

Yoga Tab (TB710FU) · 0 to before 17.5.04.059
Lenovo

Yoga Tab Plus (TB520FU) · 0 to before 17.5.10.309
Lenovo

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Physical access · No privileges required · No user interaction required

What an attacker can do

A user with physical access to an unlocked tablet could bypass device protections and execute arbitrary code. Vendor/CNA’s CVSS 4.0 assessment (base score 5.4/10) rates confidentiality, integrity and availability impact as high.