Lenovo Tablet: Physical Access Can Bypass Protections & Execute Code
CVE-2026-92777 Published on October 15, 2026
A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code.
Vulnerability Analysis
CVE-2026-92777 can be exploited with physical access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.
Attack Vector:
PHYSICAL
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Weakness Type
CWE-1394
Products Associated with CVE-2026-92777
Want to know whenever a new CVE is published for Lenovo products? stack.watch will email you.
Affected Versions
Lenovo Idea Tab Pro (TB373FU):- Before 17.5.10.057 is affected.
- Before 17.5.10.193 is affected.
- Before 17.5.10.213 is affected.
- Before 17.5.10.210 is affected.
- Before 17.5.10.170 is affected.
- Before 17.0.135 is affected.
- Before 17.0.517 is affected.
- Before 17.5.382 is affected.
- Before 17.5.382 is affected.
- Before 17.0.135 is affected.
- Before 17.0.157 is affected.
- Before 17.0.10.296 is affected.
- Before 17.0.10.284 is affected.
- Before 17.0.10.284 is affected.
- Before 17.0.10.296 is affected.
- Before 16.0.935 is affected.
- Before 17.0.10.216 is affected.
- Before 17.0.10.129 is affected.
- Before 17.0.10.216 is affected.
- Before 17.0.10.129 is affected.
- Before 17.0.280 is affected.
- Before 17.5.10.199 is affected.
- Before 17.5.36.302 is affected.
- Before 17.5.36.302 is affected.
- Before 17.5.37.216 is affected.
- Before 17.5.04.059 is affected.
- Before 17.5.10.309 is affected.