There was a brief period some years ago where browsers looked "pretty safe", but we have quickly backtracked by stuffing JS and browsers full of new APIs that are creating new vulnerabilities.
Edit: Yes. Downvoting will surely reduce the amount of CVEs.
https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=chrome+v8
https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=chrome+sand...
https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=firefox
There were also Chrome RCEs & sandbox escapes discovered in the wild as recently as November:
https://twitter.com/benhawkes/status/1323374326150701057
https://googleprojectzero.github.io/0days-in-the-wild/0day-R...
And for Firefox:
https://googleprojectzero.github.io/0days-in-the-wild//0day-...