EIP-2026-115798
PRE-CVEMicrosoft Windows Help Program - 'WinHlp32.exe' Crash (PoC)
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-115798. PoCs published by coolkaveh.
AI-analyzed exploit summary This Perl script generates a malicious HLP file that triggers a memory corruption vulnerability in WinHlp32.exe, leading to a user-mode write access violation. The exploit is designed to crash the Windows Help program and is marked as exploitable by the !exploitable tool.
Description
Microsoft Windows Help Program - 'WinHlp32.exe' Crash (PoC)
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by coolkaveh · perldoswindows
https://www.exploit-db.com/exploits/22303
This Perl script generates a malicious HLP file that triggers a memory corruption vulnerability in WinHlp32.exe, leading to a user-mode write access violation. The exploit is designed to crash the Windows Help program and is marked as exploitable by the !exploitable tool.
Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target:
Microsoft Windows Help program (WinHlp32.exe) version 5.1.2600
No auth needed
Prerequisites:
Victim must open the malicious HLP file
MITRE ATT&CK
devstral-2 · analyzed Feb 18, 2026
Full analysis →
Details
Status
pre_cve
Tracked Since
Feb 18, 2026