browser-sandbox

Twelve bytes walked out of the sandbox

CVE-2026-40369 reduced a browser sandbox escape to twelve bytes. Analysis of what failed, why it failed, and what must change at the architecture layer.