EIP-2026-118805

This exploit leverages a vulnerability in the HTML Help ActiveX control (hhctrl.ocx) to execute arbitrary JavaScript, which then fetches and executes a remote payload. The exploit uses the 'HHClick' method to trigger the vulnerability.