EIP-2026-103708

This exploit leverages a race condition in WebKit's `execCommand` to execute arbitrary JavaScript in the context of a victim page. The vulnerability arises from a time-of-check to time-of-use (TOCTOU) issue where `updateStyleIfNeeded` can trigger JavaScript execution before document validation, allowing an attacker to inject malicious HTML.