where a user uses some flaw to gain privileges than they otherwise would horizontal means gaining other user privileges vertical mean gaining a high level of privilege
to prevent, patch the: vulnerable software, anti-virus and anti-malware to mitigate, use data execution prevention techniques or address space randomisation