-
Ordinary apps acquiring admin powers. This allows a user-level program to sidestep the “Type your password to allow this” security pop-up, and secretly to elevate its own privilege.
-
Stopping crooks bypassing address randomisation, by not allowing apps to work out exact memory locations used by the kernel. This can help make it harder to guess how to hack into the system.
-
Stopping regular apps from reading kernel memory. This shouldn't happen because the kernel holds privileged data that normal users aren't supposed to see.
-
Stopping content booby-trapped in a webpage from running program code without any warnings. Remote Code Execution like this are often used in drive-by malware installs, and can be combined with an elevation of privilege attack to take over the whole computer in one go.
