[franga2000]

Realistically, if you have a browser sandbox, the system LPE exploit gives you very little more. Everything interesting on a desktop system is accessible by the user account directly.

[mjg59]

This gets you code execution in the kernel, at which point sandboxing is irrelevant.