EIP-2026-103702

This PoC exploits a use-after-free vulnerability in Chromium's Element::setAttributeNodeNS, leading to arbitrary JavaScript execution. The exploit manipulates attribute nodes and triggers garbage collection to dereference a freed object.