EIP-2026-118811

This exploit leverages a vulnerability in Microsoft Internet Explorer where JavaScript URIs are not properly removed from the browser history list. By injecting a JavaScript URI into the history, an attacker can execute arbitrary code in the Local Machine security zone when the user navigates back.