Re:HTML is the Web
by kevin_thibedeau on Wednesday June 26, 2019 @09:25AM
(#20284736)
You don't need to exploit a browser when Adobe still can't fix the holes in Reader and corporate users are still heavily dependent on Outlook.
There are very few RCEs now on modern browser (they still exist[0,1], though). The main threat is phishing, because users are gullible (and should be educated).
[0] https://www.mozilla.org/en-US/security/advisories/mfsa2019-1...
[1] https://objective-see.com/blog/blog_0x43.html
And: https://news.ycombinator.com/item?id=20283922