CVE-2026-116633: Medium severity vulnerability
Published Nov 11, 2026
·Updated
A potential vulnerability was reported in some Lenovo Tablets that could allow a third-party application to perform an arbitrary file write with elevated privileges.
Event History
Nov 11, 2026
CVE Published
via MITRE·04:16 PM
Data Sourced
via MITRE·04:16 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·05:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The attack requires a user to interact with a third-party application. No privileges are required before exploitation, but the vulnerable condition could allow that application to write arbitrary files with elevated privileges.
2
What is the potential impact if exploitation succeeds?
A successful exploit could allow arbitrary file writes with elevated privileges. The reported impact affects integrity and availability; no confidentiality impact is indicated by the provided severity vector.
3
Which devices are affected?
The report identifies some Lenovo Tablets, but the provided information does not specify the affected models, software versions, or configurations.