EIP-2026-118843

The exploit demonstrates a vulnerability in Internet Explorer 6-10 where unprivileged attackers can track system-wide mouse movements via JavaScript, even when the browser is unfocused or minimized. The PoC uses the `fireEvent` method to poll mouse coordinates from the global Event object.