Technologies for object-oriented memory management with extended segmentation

A method comprising:

• loading, by a processing circuitry of a computing device, an unsandbox associated with a user privilege level of the processor;
• loading, via the unsandbox, a sandboxed application in the user privilege level;
• associating, via the unsandbox, descriptor logic to a register associated with the processor wherein the descriptor logic references a descriptor table and comprises one or more of a protection domain identifier, an extended descriptor bit, or an extended descriptor offset;
• executing the sandboxed application in response to enablement of an application sandbox mode of the processor;
• loading a logical address in response to execution of the sandboxed application;
• and
• enabling, within a single process, the application sandbox mode in response to storing an extended descriptor selector in a code segment register such that isolation of multiple components is achieved using the application sandbox mode within the single process.

At least one non-transitory computer-readable medium having stored thereon instructions which, when executed, cause a computing device to perform operations comprising:

• loading an unsandbox associated with a user privilege level of a processor of the computing device;
• loading, via the unsandbox, a sandboxed application in the user privilege level;
• associating, via the unsandbox, descriptor logic a register associated with a processor of the computing device wherein the descriptor logic references a descriptor table and comprises one or more of a protection domain identifier, an extended descriptor bit, or an extended descriptor offset;
• executing the sandboxed application in response to enablement of an application sandbox mode of the processor;
• loading a logical address in response to execution of the sandboxed application, and
• enabling, within a single process, the application sandbox mode in response to storing an extended descriptor selector in a code segment register such that isolation of multiple components is achieved using the application sandbox mode within the single process.