EIP-2026-117514

The writeup describes a TOCTOU (Time-of-Check Time-of-Use) vulnerability in the 'MsiAdvertiseProduct' function, allowing arbitrary file reads as SYSTEM via junction manipulation. It includes a proof-of-concept tool ('readfile.exe') and a demonstration video link.