HWNDMessageHandler fullscreen_monitor_map_ UAF

Step 1. Click the button below and grant the window-management permission. A popup will open and go fullscreen on a non-primary monitor.
Step 2. While the popup is fullscreen, do ONE of:
Step 3. The page will close the popup. Focus then transfers back to this Chrome window → WM_ACTIVATE → CheckAndHandleBackgroundFullscreenOnMonitor() dereferences the dangling HWNDMessageHandler*.

Log