There are examples of straight JavaScript exploits that allow a website to read memory from anywhere in the process its code is running in.

https://cacm.acm.org/magazines/2020/7/245682-spectre-attacks...