EIP-2026-118860

This exploit leverages a drag-and-drop event vulnerability in Microsoft software to manipulate the browser's UI and potentially add a link to favorites. It uses JavaScript to trigger a popup and resize elements, demonstrating a client-side manipulation technique.