EIP-2026-118852

This exploit leverages a vulnerability in the Microsoft Log Sink Class ActiveX control to create arbitrary files on a target system. The provided HTML/JavaScript code demonstrates how an attacker can write to a file (e.g., C:\autoexec.bat) by enticing a user to visit a malicious webpage.