EIP-2026-118240

This exploit leverages a timing-based information disclosure vulnerability in the Adobe SVG Viewer ActiveX control to determine the existence of a target file. The JavaScript code attempts to load a file via the ActiveX control and checks the document.readyState to infer file existence.