CVE-2025-11193

Published Nov 3, 2025 CVSS 4.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Description
A potential vulnerability was reported in some Lenovo Tablets that could allow a local authenticated user or application to gain access to sensitive device specific information.

Remediation

Vendor Solution

Update to the version (or newer) indicated for your model in the Product Impact section in the advisory:  https://support.lenovo.com/us/en/product_security/LEN-202383 See details on updating your Lenovo Android device here https://pcsupport.lenovo.com/us/en/solutions/ht117027 .

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Lenovo
Lenovo tablet
Lenovo yoga
Vendors & Products Lenovo
Lenovo tablet
Lenovo yoga
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description A potential vulnerability was reported in some Lenovo Tablets that could allow a local authenticated user or application to gain access to sensitive device specific information.
Weaknesses CWE-256
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}

cvssV4_0

{'score': 6.8, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
lenovo
Published
Updated
Nov 3, 2025, 9:47 PM
Reserved
Sep 30, 2025, 4:21 PM
Status
Deferred
Published
Nov 3, 2025, 10:18 PM
Modified
Jun 17, 2026, 8:29 AM