EIP-2026-115728

This exploit leverages a script-injection vulnerability in Microsoft Internet Explorer by crafting malicious URLs targeting 'acr_error.htm' via the 'res://' protocol. It demonstrates arbitrary code execution in the context of the browser, potentially leading to credential theft or further attacks.