EIP-2026-118865

This exploit leverages a vulnerability in Microsoft Outlook Express where embedded XSL script code in an XML file can execute arbitrary code in the Local System security zone. The PoC demonstrates how script code can determine the Temporary Internet File directory location, leading to potential code execution.