Undefined behavior in the DOM: Core & HTML component (CVE-2026-2771) | HOL Guard CVE