Clipboard Overwrite Vulnerability in Lenovo Android Application for Tablets
CVE-2026-7516

5.1MEDIUM

Key Information:

Vendor

Lenovo
Status
Application
Vendor
CVE Published:
10 June 2026

What is CVE-2026-7516?

A security flaw has been discovered in the Lenovo Android Application, specifically designed for tablets in the Chinese market. This vulnerability permits websites accessed through the app's built-in browser to manipulate and overwrite the system clipboard contents. This could potentially lead to unauthorized access and modifications of clipboard data, posing a risk to user privacy and data integrity.

Affected Version(s)

Application Android 0 < 7.3.8

References

https://iknow.lenovo.com.cn/detail/440821
vendor-advisory
https://shop.lenovo.com.cn/
product

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Lenovo thanks Xinfeng Chen 陈鑫峰 and Mingming Wan 万明明 from Geely Zero Lab at Geely Auto for reporting this vulnerability.
.