EIP-2026-118861

This exploit leverages a file extension obfuscation vulnerability in Microsoft Outlook Express to bypass attachment security warnings. By crafting an EML attachment without a filename, the subject is used as the filename, potentially tricking users into executing malicious code.