Lenovo Yoga Tab Plus TB520FU vulnerabilities

4 CVEs affecting Lenovo Yoga Tab Plus TB520FU, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-92777, published 2026-10-16.

More from Lenovo.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-89057, published 2026-10-16. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.
• CVE-2026-92777, published 2026-10-16. Medium severity, CVSS 6.4. EPSS: 0.2% chance of exploitation in the next 30 days. A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code.
• CVE-2025-14058, published 2026-01-14. Low severity, CVSS 3.2. EPSS: 0.2% chance of exploitation in the next 30 days. A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify Control Center settings if the device is…
• CVE-2025-11193, published 2025-11-03. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. A potential vulnerability was reported in some Lenovo Tablets that could allow a local authenticated user or application to gain access to sensitive device specific information.