Lenovo Legion Tab 8.8, 3 TB321FU vulnerabilities

2 CVEs affecting Lenovo Legion Tab 8.8, 3 TB321FU, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-92777, published 2026-10-16.

More from Lenovo.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-89057, published 2026-10-16. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.
• CVE-2026-92777, published 2026-10-16. Medium severity, CVSS 6.4. EPSS: 0.2% chance of exploitation in the next 30 days. A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code.