EIP-2026-117583

This exploit leverages a vulnerability in Microsoft Windows' handling of VCF (vCard) files, where a crafted URL field can trigger execution of a malicious CPL file. The PoC includes a compiled CPL file and a VCF file that, when opened, executes arbitrary code via a deceptive hyperlink.