CVE-2026-7516

MEDIUM

Lenovo Application < 7.3.8 - Exposed Dangerous Method or Function

Title source: rule
STIX 2.1

Description

A vulnerability was identified in the Lenovo Android Application, distributed exclusively on tablets in the Chinese market, that could allow a website visited by the built-in browser to overwrite system clipboard contents.

References (2)

Core 2
Core References
Vendor Advisory vendor-advisory
https://iknow.lenovo.com.cn/detail/440821
Product product
https://shop.lenovo.com.cn/

Scores

CVSS v3 4.3
EPSS 0.0017
EPSS Percentile 6.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-749
Status published
Products (1)
Lenovo/Application < 7.3.8
Published Jun 10, 2026
Tracked Since Jun 10, 2026