EIP-2026-103710

This exploit leverages a type confusion vulnerability in WebKit's handling of shadow DOM elements, allowing an attacker to leak internal elements and manipulate them to achieve arbitrary code execution. The PoC demonstrates how an attacker can access and repurpose a SliderThumbElement from an input element's shadow DOM.