"I was hoping to compete in Pwn2Own with a Firefox full-chain entry, but unfortunately it was rejected. I’ve reported the vulnerability to the Mozilla team," writes a researcher under the handle @ggwhyp There is very little information available about the researcher. In one video, the author demonstrates an RCE (Remote Code Execution) example. A user opens a local web page in the browser; then, a hidden script bypasses internal security mechanisms and escapes the browser's sandbox 🤔 As a result, Windows automatically launches the command prompt and the calculator app, demonstrating control over the target machine The author of the thread planned to present this discovery at the renowned Pwn2Own hacking tournament. At such competitions, cybersecurity researchers receive large cash prizes for demonstrating successful exploits of popular software The tournament organizers rejected the researcher's application. The reason could have been a duplicate of an already known bug or a failure to comply with the rules Following the rejection, the author acted in accordance with professional ethics and submitted the vulnerability details directly to the Mozilla development team for a prompt security patch