Are they only buying browser RCEs or are they also interested in RCEs deliverable via browser? ex: Target hits website -> site delivers RCE for some software t

Are they only buying browser RCEs or are they also interested in RCEs deliverable via browser? ex: Target hits website -> site delivers RCE for some software that is on the target's system