EIP-2026-119146

The writeup details a vulnerability in the Windows Skype client's URI handler, allowing command line argument injection via raw binary bytes to override the Datapath and potentially exfiltrate user data to a remote SMB share. It includes technical details on the exploitation method and mitigation steps.