Description
A potential vulnerability was reported in some Lenovo Tablets that could allow a third-party application to perform an arbitrary file write with elevated privileges.
Published: 2026-11-11
Score: 6.9 Medium
EPSS: n/a
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

Vendor Solution

Update to the version (or higher) as recommended in the advisory - https://support.lenovo.com/us/en/product_security/LEN-220237

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 11 Nov 2026 16:30:00 +0000

Type Values Removed Values Added
Description A potential vulnerability was reported in some Lenovo Tablets that could allow a third-party application to perform an arbitrary file write with elevated privileges.
First Time appeared Lenovo
Lenovo idea Tab Pro Tb373fu
Lenovo idea Tab Tab K11 Gen 2 Tb336zu
Lenovo lenovo Idea Tab Lenovo Tab K11 Gen 2 Tb336fu
Lenovo lenovo Legion Tab 8.8 Tb321fu
Lenovo lenovo Tab K9 Tb305fu
Lenovo lenovo Tab K9 Tb305xu
Lenovo lenovo Tab One Tb305fu
Lenovo lenovo Tab One Tb305xu
Lenovo lenovo Tab Plus Tb351fu
Lenovo lenovo Tab With Clear Case Lenovo Tab With Folio Case Tb311fu
Lenovo lenovo Tab With Clear Case Lenovo Tab With Folio Case Tb311xu
Lenovo lenovo Yoga Tab Plus Tb520fu
Lenovo yoga Tab Tb710fu
Weaknesses CWE-926
CPEs cpe:2.3:a:lenovo:idea_tab_pro_tb373fu:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:idea_tab_tab_k11_gen_2_tb336zu:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:lenovo_idea_tab_lenovo_tab_k11_gen_2_tb336fu:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:lenovo_legion_tab_8.8_tb321fu:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:lenovo_tab_k9_tb305fu:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:lenovo_tab_k9_tb305xu:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:lenovo_tab_one_tb305fu:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:lenovo_tab_one_tb305xu:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:lenovo_tab_plus_tb351fu:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:lenovo_tab_with_clear_case_lenovo_tab_with_folio_case_tb311fu:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:lenovo_tab_with_clear_case_lenovo_tab_with_folio_case_tb311xu:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:lenovo_yoga_tab_plus_tb520fu:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:yoga_tab_tb710fu:*:*:*:*:*:*:*:*
Vendors & Products Lenovo
Lenovo idea Tab Pro Tb373fu
Lenovo idea Tab Tab K11 Gen 2 Tb336zu
Lenovo lenovo Idea Tab Lenovo Tab K11 Gen 2 Tb336fu
Lenovo lenovo Legion Tab 8.8 Tb321fu
Lenovo lenovo Tab K9 Tb305fu
Lenovo lenovo Tab K9 Tb305xu
Lenovo lenovo Tab One Tb305fu
Lenovo lenovo Tab One Tb305xu
Lenovo lenovo Tab Plus Tb351fu
Lenovo lenovo Tab With Clear Case Lenovo Tab With Folio Case Tb311fu
Lenovo lenovo Tab With Clear Case Lenovo Tab With Folio Case Tb311xu
Lenovo lenovo Yoga Tab Plus Tb520fu
Lenovo yoga Tab Tb710fu
References
Metrics cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Lenovo Idea Tab Pro Tb373fu Idea Tab Tab K11 Gen 2 Tb336zu Lenovo Idea Tab Lenovo Tab K11 Gen 2 Tb336fu Lenovo Legion Tab 8.8 Tb321fu Lenovo Tab K9 Tb305fu Lenovo Tab K9 Tb305xu Lenovo Tab One Tb305fu Lenovo Tab One Tb305xu Lenovo Tab Plus Tb351fu Lenovo Tab With Clear Case Lenovo Tab With Folio Case Tb311fu Lenovo Tab With Clear Case Lenovo Tab With Folio Case Tb311xu Lenovo Yoga Tab Plus Tb520fu Yoga Tab Tb710fu
cve-icon MITRE

Status: PUBLISHED

Assigner: lenovo

Published:

Updated: 2026-11-11T16:19:09.349Z

Reserved: 2026-10-26T17:53:59.734Z

Link: CVE-2026-116633

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-11-11T17:17:16.180

Modified: 2026-11-11T17:17:16.180

Link: CVE-2026-116633

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-926

    Improper Export of Android Application Components