It is most certainly possible to escape browser sandbox and inject to a vulnerable driver through JS.