EIP-2026-116016

This exploit leverages a Java applet vulnerability in Oracle Java SE 6 Update 20, where accessing the 'children' property of an applet element triggers a use-after-free condition, leading to a denial-of-service (DoS) via browser crash. The PoC uses JavaScript to dynamically create an applet and access its children property, causing instability.