EIP-2026-115653

This exploit leverages a vulnerability in Microsoft Excel 2007 by embedding a malicious OBJECT tag with a JavaScript URL parameter, which triggers a denial-of-service condition. The PoC demonstrates the potential for arbitrary code execution, though this is unconfirmed.