EIP-2026-100065

This exploit leverages an intent-based attack in Facebook for Android to load a malicious HTML file via WebView, enabling file theft (e.g., webview.db) through XHR. The attack requires the victim to be logged in and exploits improper intent handling.