[lomnakkus]

AFAIUI (not a security researcher) that's actually how most of the most devastating security exploits work. There are obvious exceptions like HEARTBLEED, but in general escalation through multiple levels seems to be the name of the game.

[rodjun]

Or you can just get root from javascript, which that guy also did