EIP-2026-115670

This exploit targets a vulnerability in Internet Explorer by manipulating the `document.execCommand('Refresh')` and `createPopup()` methods to inject JavaScript into a new window context. It leverages a timing-based approach to bypass security restrictions and execute arbitrary code.