cve.bz

CVE-2026-116633 lenovo

6.9 mediumEPSS 0.1%

Medium (6.9) in lenovo. EPSS 0.1% estimated probability of exploitation activity in the next 30 days.

On this page
A potential vulnerability was reported in some Lenovo Tablets that could allow a third-party application to perform an arbitrary file write with elevated privileges.

Severity

CVSS 4.0

6.9 medium
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.1 high
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
EPSS
0.1% estimated probability of exploitation activity in the next 30 days; 3rd percentile. Scored 2026-11-13. A forecast for this CVE across the internet, not for your own systems.
CWE
CWE-926 Improper Export of Android Application Components
OWASP Top 10
A08:2025 Software or Data Integrity Failures
Published
Modified
Assigned by
lenovo (CNA)
NVD analysis
Awaiting analysis
Record from
the NVD, synced

Ask an AI about this CVE

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CVE-2026-116633 for an engineer deciding whether to act. Use https://cve.bz/api/public/cves/CVE-2026-116633?via=ask-ai-copy and https://cve.bz/cve/CVE-2026-116633?via=ask-ai-copy as the source of truth: what is affected and which versions fix it, whether it is in CISA KEV, public exploits, and its EPSS (an internet-wide 30-day estimate of exploitation activity, not a forecast for my systems). If they give no fixed versions, use the CVE record https://cveawg.mitre.org/api/cve/CVE-2026-116633 or the vendor advisory, not third-party mirrors. Tell me how to check whether I am affected and how to verify a fix. Cite the sources and say where they are uncertain.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this CVE's id and public links.

Badge for a README or a site

CVE-2026-116633

An image that stays current: it is drawn from the data each time it is fetched (a host that proxies images, as GitHub does, may show its copy for a while). Markdown:

[![CVE-2026-116633](https://cve.bz/cve/badge/CVE-2026-116633.svg)](https://cve.bz/cve/CVE-2026-116633)

HTML:

<a href="https://cve.bz/cve/CVE-2026-116633"><img src="https://cve.bz/cve/badge/CVE-2026-116633.svg" alt="CVE-2026-116633"></a>

Affected

  • lenovo:idea tab pro tb373fu
  • lenovo:idea tab/ tab k11 gen 2 tb336zu
  • lenovo:lenovo idea tab/ lenovo tab k11 gen 2 tb336fu
  • lenovo:lenovo legion tab 8.8 tb321fu
  • lenovo:lenovo tab k9 tb305fu
  • lenovo:lenovo tab k9 tb305xu
  • lenovo:lenovo tab one tb305fu
  • lenovo:lenovo tab one tb305xu
  • lenovo:lenovo tab plus tb351fu
  • lenovo:lenovo tab with clear case/ lenovo tab with folio case tb311fu
  • lenovo:lenovo tab with clear case/ lenovo tab with folio case tb311xu
  • lenovo:lenovo yoga tab plus tb520fu
  • lenovo:yoga tab tb710fu

Versions

From the CNA's record in the CVE List.

ProductAffected
Lenovo Idea Tab Pro TB373FUbefore 17.5.10.107
Lenovo Tab One TB305FUbefore 17.0.10.324
Lenovo Tab One TB305XUbefore 17.0.10.318
Lenovo Tab Plus TB351FUbefore TBD
Lenovo Yoga Tab Plus TB520FUbefore 18.5.10.037
Lenovo Legion Tab 8.8 TB321FUbefore 17.5.10.319
Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case TB311FUbefore 17.5.36.508
Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case TB311XUbefore 17.5.37.529
Lenovo Tab K9 TB305FUbefore 17.0.10.324
Lenovo Tab K9 TB305XUbefore 17.0.10.318
Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 TB336FUbefore 17.5.10.348
Lenovo Idea Tab/ Tab K11 Gen 2 TB336ZUbefore 17.5.10.443
Lenovo Yoga Tab TB710FUbefore 1.5.04.519

References

Check your stackJSON