[6nf]

Yes it's still a major vector. The sheer size of the code base needed for a modern browser makes for a significant surface to attack.

http://venturebeat.com/2016/03/18/pwn2own-2016-chrome-edge-a...