Potential File Write Vulnerability in Lenovo Tablets
CVE-2026-116633

6.9MEDIUM

Key Information:

Vendor

Lenovo
Status
Idea Tab Pro Tb373fu
Lenovo Tab One Tb305fu
Lenovo Tab One Tb305xu
Lenovo Tab Plus Tb351fu
Vendor
CVE Published:
11 November 2026

What is CVE-2026-116633?

A vulnerability exists in select Lenovo Tablets that could enable a third-party application to execute arbitrary file writes with elevated privileges, potentially compromising system integrity. This issue raises concerns regarding unauthorized access and the manipulation of sensitive data, reinforcing the importance of robust application security and timely updates.

Affected Version(s)

Idea Tab Pro TB373FU 0 < 17.5.10.107

Idea Tab/ Tab K11 Gen 2 TB336ZU 0 < 17.5.10.443

Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 TB336FU 0 < 17.5.10.348

References

https://support.lenovo.com/us/en/product_security/LEN-220237
vendor-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Lenovo thanks the Safety Research team of Huazhong University of Science and Technology for reporting this vulnerability.
.