EIP-2026-118843
PRE-CVEMicrosoft Internet Explorer 6 < 10 - Mouse Tracking
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-118843. PoCs published by Nick Johnson.
AI-analyzed exploit summary The exploit demonstrates a vulnerability in Internet Explorer 6-10 where unprivileged attackers can track system-wide mouse movements via JavaScript, even when the browser is unfocused or minimized. The PoC uses the `fireEvent` method to poll mouse coordinates from the global Event object.
Description
Microsoft Internet Explorer 6 < 10 - Mouse Tracking
Exploits (1)
The exploit demonstrates a vulnerability in Internet Explorer 6-10 where unprivileged attackers can track system-wide mouse movements via JavaScript, even when the browser is unfocused or minimized. The PoC uses the `fireEvent` method to poll mouse coordinates from the global Event object.