A potential vulnerability was reported in some Lenovo Tablets that could allow a third-party application to perform an arbitrary file write with elevated privileges.

Attack Vector Local

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction Passive

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Lenovo Idea Tab Pro TB373FU unaffected
Version Status Constraints
0 affected < 17.5.10.107
Lenovo Lenovo Tab One TB305FU unaffected
Version Status Constraints
0 affected < 17.0.10.324
Lenovo Lenovo Tab One TB305XU unaffected
Version Status Constraints
0 affected < 17.0.10.318
Lenovo Lenovo Tab Plus TB351FU unaffected
Version Status Constraints
0 affected < TBD
Lenovo Lenovo Yoga Tab Plus TB520FU unaffected
Version Status Constraints
0 affected < 18.5.10.037
Lenovo Lenovo Legion Tab 8.8 TB321FU unaffected
Version Status Constraints
0 affected < 17.5.10.319
Lenovo Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case TB311FU unaffected
Version Status Constraints
0 affected < 17.5.36.508
Lenovo Lenovo Tab with Clear Case/ Lenovo Tab with Folio Case TB311XU unaffected
Version Status Constraints
0 affected < 17.5.37.529
Lenovo Lenovo Tab K9 TB305FU unaffected
Version Status Constraints
0 affected < 17.0.10.324
Lenovo Lenovo Tab K9 TB305XU unaffected
Version Status Constraints
0 affected < 17.0.10.318
Lenovo Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 TB336FU unaffected
Version Status Constraints
0 affected < 17.5.10.348
Lenovo Idea Tab/ Tab K11 Gen 2 TB336ZU unaffected
Version Status Constraints
0 affected < 17.5.10.443
Lenovo Yoga Tab TB710FU unaffected
Version Status Constraints
0 affected < 1.5.04.519

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Lenovo Subscribe
Idea Tab Pro Tb373fu Subscribe
Idea Tab Tab K11 Gen 2 Tb336zu Subscribe
Lenovo Idea Tab Lenovo Tab K11 Gen 2 Tb336fu Subscribe
Lenovo Legion Tab 8.8 Tb321fu Subscribe
Lenovo Tab K9 Tb305fu Subscribe
Lenovo Tab K9 Tb305xu Subscribe
Lenovo Tab One Tb305fu Subscribe
Lenovo Tab One Tb305xu Subscribe
Lenovo Tab Plus Tb351fu Subscribe
Lenovo Tab With Clear Case Lenovo Tab With Folio Case Tb311fu Subscribe
Lenovo Tab With Clear Case Lenovo Tab With Folio Case Tb311xu Subscribe
Lenovo Yoga Tab Plus Tb520fu Subscribe
Yoga Tab Tb710fu Subscribe
Advisories

No advisories yet.

Fixes

Solution

Update to the version (or higher) as recommended in the advisory - https://support.lenovo.com/us/en/product_security/LEN-220237

Workaround

No workaround given by the vendor.

References
Link Providers
https://support.lenovo.com/us/en/product_security/LEN-220237 cve-icon
History

Wed, 11 Nov 2026 16:30:00 +0000

Type Values Removed Values Added
Description A potential vulnerability was reported in some Lenovo Tablets that could allow a third-party application to perform an arbitrary file write with elevated privileges.
First Time appeared Lenovo
Lenovo idea Tab Pro Tb373fu
Lenovo idea Tab Tab K11 Gen 2 Tb336zu
Lenovo lenovo Idea Tab Lenovo Tab K11 Gen 2 Tb336fu
Lenovo lenovo Legion Tab 8.8 Tb321fu
Lenovo lenovo Tab K9 Tb305fu
Lenovo lenovo Tab K9 Tb305xu
Lenovo lenovo Tab One Tb305fu
Lenovo lenovo Tab One Tb305xu
Lenovo lenovo Tab Plus Tb351fu
Lenovo lenovo Tab With Clear Case Lenovo Tab With Folio Case Tb311fu
Lenovo lenovo Tab With Clear Case Lenovo Tab With Folio Case Tb311xu
Lenovo lenovo Yoga Tab Plus Tb520fu
Lenovo yoga Tab Tb710fu
Weaknesses CWE-926
CPEs cpe:2.3:a:lenovo:idea_tab_pro_tb373fu:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:idea_tab_tab_k11_gen_2_tb336zu:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:lenovo_idea_tab_lenovo_tab_k11_gen_2_tb336fu:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:lenovo_legion_tab_8.8_tb321fu:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:lenovo_tab_k9_tb305fu:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:lenovo_tab_k9_tb305xu:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:lenovo_tab_one_tb305fu:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:lenovo_tab_one_tb305xu:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:lenovo_tab_plus_tb351fu:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:lenovo_tab_with_clear_case_lenovo_tab_with_folio_case_tb311fu:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:lenovo_tab_with_clear_case_lenovo_tab_with_folio_case_tb311xu:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:lenovo_yoga_tab_plus_tb520fu:*:*:*:*:*:*:*:*
cpe:2.3:a:lenovo:yoga_tab_tb710fu:*:*:*:*:*:*:*:*
Vendors & Products Lenovo
Lenovo idea Tab Pro Tb373fu
Lenovo idea Tab Tab K11 Gen 2 Tb336zu
Lenovo lenovo Idea Tab Lenovo Tab K11 Gen 2 Tb336fu
Lenovo lenovo Legion Tab 8.8 Tb321fu
Lenovo lenovo Tab K9 Tb305fu
Lenovo lenovo Tab K9 Tb305xu
Lenovo lenovo Tab One Tb305fu
Lenovo lenovo Tab One Tb305xu
Lenovo lenovo Tab Plus Tb351fu
Lenovo lenovo Tab With Clear Case Lenovo Tab With Folio Case Tb311fu
Lenovo lenovo Tab With Clear Case Lenovo Tab With Folio Case Tb311xu
Lenovo lenovo Yoga Tab Plus Tb520fu
Lenovo yoga Tab Tb710fu
References
Metrics cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: lenovo

Published:

Updated: 2026-11-11T16:19:09.349Z

Reserved: 2026-10-26T17:53:59.734Z

Link: CVE-2026-116633

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses