EIP-2026-118722

This exploit leverages an insecure method in the LEADTOOLS Imaging LEADSmtp ActiveX control to overwrite files in the context of the affected application (typically Internet Explorer). The vulnerability is triggered via the SaveMessage method, allowing arbitrary file creation or overwrite with user-level privileges.