Skip to content
Fencer Intel
high 7.1

CVE-2026-116633 json

A potential vulnerability was reported in some Lenovo Tablets that could allow a third-party application to perform an arbitrary file write…

published 18h ago modified 17h ago also EUVD-2026-123578

cvss
7.1
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
—
no EPSS score yet
public exploits
0
none known

Summary

A potential vulnerability was reported in some Lenovo Tablets that could allow a third-party application to perform an arbitrary file write with elevated privileges.

Patch / fix

  • Lenovo Idea Tab Pro TB373FU 17.5.10.107
  • Lenovo Lenovo Tab One TB305FU 17.0.10.324
  • Lenovo Lenovo Tab One TB305XU 17.0.10.318
  • Lenovo Lenovo Yoga Tab Plus TB520FU 18.5.10.037
  • Lenovo Lenovo Legion Tab 8.8 TB321FU 17.5.10.319
  • Lenovo Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case TB311FU 17.5.36.508
  • Lenovo Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case TB311XU 17.5.37.529
  • Lenovo Lenovo Tab K9 TB305FU 17.0.10.324
  • Lenovo Lenovo Tab K9 TB305XU 17.0.10.318
  • Lenovo Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 TB336FU 17.5.10.348
  • Lenovo Idea Tab/ Tab K11 Gen 2 TB336ZU 17.5.10.443
  • Lenovo Yoga Tab TB710FU 1.5.04.519

Is CVE-2026-116633 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

CVSS scores

assigned by version score vector
CNA 4.0 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
CNA 3.1 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
CNA 4.0 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD 3.1 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Affected products

  • Lenovo Idea Tab Pro TB373FU
  • Lenovo Lenovo Tab One TB305FU
  • Lenovo Lenovo Tab One TB305XU
  • Lenovo Lenovo Tab Plus TB351FU
  • Lenovo Lenovo Yoga Tab Plus TB520FU
  • Lenovo Lenovo Legion Tab 8.8 TB321FU
  • Lenovo Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case TB311FU
  • Lenovo Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case TB311XU
  • Lenovo Lenovo Tab K9 TB305FU
  • Lenovo Lenovo Tab K9 TB305XU
  • Lenovo Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 TB336FU
  • Lenovo Idea Tab/ Tab K11 Gen 2 TB336ZU
  • Lenovo Yoga Tab TB710FU

Classification

Weakness
  • CWE-926 Improper Export of Android Application Components

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.