I found this guy claiming that he has a 0-day Exploit for Chrome, Firefox and Windows 10, but to me it seems to be fake...
Video - 0day RCE Exploit for Google Chrome 59.0.3071.86
Here is video for newer version of Chrome 59.0.3071.115.
Description:
0day RCE Exploit for Google Chrome 59.0.3071.86
Exploit Type: Remote code execution, Sandbox escape.
Exploitation Parameters: Bypasses ASLR, Bypasses DEP / W ^ X, Bypasses EMET Version 5.52±
Privilege Level Gained: Medium
How can we be sure that this is not real? For me it looks to good to be true...