CVE-2025-20356

creationtimestamp| type| source ---|---|--- 2025-10-01 16:59:42+00:00| seen| Telegram/NmNWd55LaNYEsyztmCerdFyhj2znpBL8Qa5viMnmvNpsqI...

CVE-2022-20356

In shouldAllowFgsWhileInUsePermissionLocked of ActiveServices.java, there is a possible way to start foreground service from background due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...

CVE-2024-20356

creationtimestamp| type| source ---|---|--- 2024-04-18 14:55:08+00:00| published-proof-of-concept| https://t.me/RedTeamFeed/273 2024-04-20 02:10:24+00:00| published-proof-of-concept| https://t.me/CNArsenal/2349 2024-04-20 12:36:36+00:00| published-proof-of-concept| https://t.me/cKure/12767...

Exploit for CVE-2024-20356

CVE-2024-20356 This is a proof of concept for CVE-2024-20356,...

CVE-2022-20356

creationtimestamp| type| source ---|---|--- 2022-08-11 00:26:12+00:00| seen| https://t.me/cibsecurity/47889...

CVE-2022-20356

In shouldAllowFgsWhileInUsePermissionLocked of ActiveServices.java, there is a possible way to start foreground service from background due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...

CVE-2022-20356

CVE-2022-20356 affects Android 11/12/12L via the shouldAllowFgsWhileInUsePermissionLocked path in ActiveServices.java. The root cause is improper input validation, allowing a foreground service to be started from the background, causing local elevation of privilege with no additional execution pr...

CVE-2018-20356

An invalid read of 8 bytes due to a use-after-free vulnerability in the mghttpfreeprotodatacgi function call in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service application crash or remote code execution...

CVE-2018-20356

CVE-2018-20356 — affected software: Cesanta Mongoose Embedded Web Server Library (

CVE-2018-20356

An invalid read of 8 bytes due to a use-after-free vulnerability in the mghttpfreeprotodatacgi function call in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service application crash or remote code execution...