EIP-2026-118818

This exploit leverages the MSScriptControl.ScriptControl ActiveX object in Internet Explorer to read arbitrary local files via the GetObject function. It demonstrates an information leakage vulnerability by retrieving the contents of a known file (C:\TEST.TXT) and displaying it in an alert box.