EIP-2026-117571

This exploit leverages a security bypass in Microsoft Windows Media Center (WMV/WMA file parsing) to achieve arbitrary code execution by embedding a 'URL' script instruction in a crafted file. It exploits the lack of 'Local Machine Zone Lockdown' in the ehexthost32 plugin, allowing navigation to local files and execution in a privileged context.