CVE-2026-116633
Received
Received - Intake
Arbitrary File Write in Lenovo Tablets
Vulnerability report for CVE-2026-116633, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-11-11
Last updated on: 2026-11-11
Assigner: Lenovo Group Ltd.
Description
Description
A potential vulnerability was reported in some Lenovo Tablets that could allow a third-party application to perform an arbitrary file write with elevated privileges.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Lenovo | Idea Tab Pro TB373FU | From 0 (inc) to 17.5.10.107 (exc) |
| Lenovo | Lenovo Tab One TB305FU | From 0 (inc) to 17.0.10.324 (exc) |
| Lenovo | Lenovo Tab One TB305XU | From 0 (inc) to 17.0.10.318 (exc) |
| Lenovo | Lenovo Yoga Tab Plus TB520FU | From 0 (inc) to 18.5.10.37 (exc) |
| Lenovo | Lenovo Legion Tab 8.8 TB321FU | From 0 (inc) to 17.5.10.319 (exc) |
| Lenovo | Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case TB311FU | From 0 (inc) to 17.5.36.508 (exc) |
| Lenovo | Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case TB311XU | From 0 (inc) to 17.5.37.529 (exc) |
| Lenovo | Lenovo Tab K9 TB305FU | From 0 (inc) to 17.0.10.324 (exc) |
| Lenovo | Lenovo Tab K9 TB305XU | From 0 (inc) to 17.0.10.318 (exc) |
| Lenovo | Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 TB336FU | From 0 (inc) to 17.5.10.348 (exc) |
| Lenovo | Idea Tab/ Tab K11 Gen 2 TB336ZU | From 0 (inc) to 17.5.10.443 (exc) |
| Lenovo | Yoga Tab TB710FU | From 0 (inc) to 1.5.4.519 (exc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-926 | The Android application exports a component for use by other applications, but does not properly restrict which applications can launch the component or access the data it contains. |
