EIP-2026-119543

This exploit leverages the Microsoft Scriptlet Component ActiveX in MS Office Word to execute JavaScript, which then reads and discloses the contents of local files (e.g., WindowsUpdate.log) via an XMLHTTP request. It bypasses some IE security features by referencing the document itself as an HTML file.