EIP-2026-115547

This exploit targets a vulnerability in the LEADImgListLib.LEADImgList ActiveX control (ltlst11n.ocx) by passing malformed arguments to the 'Insert' method, leading to an access violation and potential remote code execution. The PoC demonstrates the crash via a crafted HTML page with VBScript.