Renderer Process
The sandboxed browser process that parses HTML, runs page JavaScript and paints content. It has no direct file, network or process-creation rights and reaches them only through IPC to the browser process, so code execution inside it is contained until an attacker also escapes the sandbox.