There aren't really any big exploits anymore that one can target en masse. Most of the exploits that do pop up require not only extremely specific targeting, but also pretty hardcore engineering to actually to stuff with the exploit. To get from something like a double free to a shell isn't exactly straightforward (and in some cases, not even possible).

Ironically enough, even though they are still VERY rare, I believe that fully remote exploits for Apple pop up at a higher frequency, because of how intricately their apps tie into the OS of the phone for performance reasons. Over the years, I seem to remember reading more about them on Project Zero than