EIP-2026-119113

This exploit targets a heap-based buffer overflow vulnerability in SapGUI BI's 'Tags' property via an ActiveX control. It uses a combination of heap spraying and shellcode execution to achieve remote code execution (RCE), specifically launching calc.exe as a proof-of-concept.