EIP-2026-118810

This exploit leverages a cross-zone scripting vulnerability in Microsoft Internet Explorer to execute arbitrary commands via saved document object references. It demonstrates command execution through the Windows Command Prompt (cmd.exe) by manipulating the 'res:' protocol and MSITStore objects.