Browser bugs are found in every single browser on every single platform. They're reported for free, traded privately, sold privately, given to the vendor for a bounty, used to spread malware, discovered in American corporations, discovered in Iranian corporations, and more. There is nothing exceptional here. This is business as usual. It's non-trivial, but far from exceptional.