I think there are already some nasty things that are cross platform due to targeting Java or Flash regardless of the OS under it. The question will be what the malware can do once it has exploited the third party vulnerability. That is the part I'm interested to see personally.