Google and Microsoft disclosed CVE-2026-7985 on May 6, 2026, a medium-severity Chromium GPU use-after-free fixed in Chrome before 148.0.7778.96 that could let an attacker who already compromised the renderer attempt a sandbox escape through a crafted HTML page. The awkward part is not the patch...