Right, so all attacks now go: 1. Send payload to a process (image in a browser say) 2. Use payload to get code execution 3. If your current process has all t

Right, so all attacks now go: 1. Send payload to a process (image in a browser say) 2. Use payload to get code execution 3. If your current process has all the access you need then go forth and conquer; else 4. Send a payload to another process, go to step 2 Sandboxes are mitigations and roadblocks that increase the complexity of an attack they don’t make them go away.