Crash on "Page.fileChooserOpened" event callback

Description

await WebView2.CoreWebView2.CallDevToolsProtocolMethodAsync("Page.enable", "{}");
WebView2.CoreWebView2.GetDevToolsProtocolEventReceiver("Page.fileChooserOpened").DevToolsProtocolEventReceived += OnPageFileChooserOpened;
await WebView2.CoreWebView2.CallDevToolsProtocolMethodAsync("Page.setInterceptFileChooserDialog", "{\"enabled\": true}");

will either work, or do nothing or crash with an Access violation (write or read).
Seems to depend on how many objects were created until the callback is triggered within the WebView2

Version
SDK: AppSDK 1.1.3 & 1.1.4
Runtime: Dev 106.0.1356.0
Framework: WinUI3 Desktop
OS: Win11 22000.918

Repro Steps

1. run project from https://github.com/minesworld/WindowsAppSDKBugs
2. put into the text box an address where a file upload is possible, click "Go" button
3. do the file upload, if the callback is triggered "OnPageFileChooserOpened" will be shown in debug output...

Expected behavior is that it will work every time.

Screenshots

Additional context
Filed a Bug under AppSDK too... https://github.com/microsoft/WindowsAppSDK/issues/2921