EIP-2026-114861

This exploit leverages a use-after-free vulnerability in Adobe Flash's MovieClip.attachMovie method. By redefining valueOf or toString methods, an attacker can trigger arbitrary code execution during object cleanup, leading to potential remote code execution (RCE).