Medium 5.5Published Nov 3, 2025

CVE-2025-11193A potential vulnerability was reported in some Lenovo Tablets that could allow a local authenticated user or application to gain access to sensitive device specific information.

Updated under an hour ago (Oct 28, 2026, 1:00 AM ET)

Does this affect you?

It affects Lenovo Tab M11 TB330FU TB330XU and 18 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Lenovo Tab M11 TB330FU TB330XU

Exploited in the last 30 days

A potential vulnerability was reported in some Lenovo Tablets that could allow a local authenticated user or application to gain access to sensitive device specific information.

CVSS: 5.5 MEDIUM (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness (CWE): CWE-256
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: lenovo
NVD analysis: Deferred
Record last updated: Nov 3, 2025
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Lenovo Tab M11 TB330FU TB330XU lenovo:tab_m11_tb330fu_tb330xu (from the name)	before TB330FU_ROW_OPEN_USER_V5_V_ZUI_17.0.274_ST_251011; before TB330XU_ROW_OPEN_USER_V5_V_ZUI_17.0.235_ST_251011	CNA record
Lenovo Tab K11 TB330FU TB330FUP TB330XU TB330XUP lenovo:tab_k11_tb330fu_tb330fup_tb330xu_tb330xup (from the name)	before TB330FU_ROW_OPEN_USER_V5_V_ZUI_17.0.274_ST_251011; before TB330XU_ROW_OPEN_USER_V5_V_ZUI_17.0.235_ST_251011	CNA record
Lenovo Idea Tab Pro TB373FU lenovo:idea_tab_pro_tb373fu (from the name)	before 17.0.04.184	CNA record
Lenovo Tab WiFi 5G lenovo:tab_wifi_5g (from the name)	before 17.0.10.457	CNA record
Lenovo Tab K9 TB305FU lenovo:tab_k9_tb305fu (from the name)	before 17.0.10.069	CNA record
Lenovo Tab K9 TB305XU lenovo:tab_k9_tb305xu (from the name)	before 17.0.10.065	CNA record
Lenovo Tab Plus TB520FU lenovo:tab_plus_tb520fu (from the name)	before 17.0.12.203	CNA record
Lenovo Tab M8 4th Gen 2024 TB301FU TB301XU lenovo:tab_m8_4th_gen_2024_tb301fu_tb301xu (from the name)	before TB300FU_USR_S101112_250919_MP1V1111_ROW; before TB300XU_USR_S101103_250919_MP1V1111_ROW	CNA record
Lenovo Tab Extreme TB570ZU TB570FU lenovo:tab_extreme_tb570zu_tb570fu (from the name)	before 17.0.104	CNA record
Lenovo Tab M10 5G TB360ZU lenovo:tab_m10_5g_tb360zu (from the name)	before 16.0.783	CNA record
1–10 of 19

References

References

https://support.lenovo.com/us/en/product_security/LEN-202383

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.