js exploits in major browsers leading to remote code execution

There are known attacks from the last year, and probably a huge pile of 0-days waiting to be used.