> Vulnerabilities once you have access to the machine are not really worth spending time on That's absolute nonsense. There's so many platforms, Android/iOS, w

> Vulnerabilities once you have access to the machine are not really worth spending time on That's absolute nonsense. There's so many platforms, Android/iOS, where applications are compartmentalized: local privilege escalation (LPE) vulnerabilities is what enables a rogue application (or remote code execution into one, such as a browser/chat), into full control of the device and its data. Sometimes LPEs are needed to achieve some level of persistence. In VMs, a guest LPE is frequently needed to interface (and exploit) directly the emulated/paravirtualized devices and VM-escape into the host OS. Yes, it is a big deal.