Fx independently discovered the RCE which Google had silently patched and flagged it in April.