You could break out of the isolation by using kernel vulnerabilities, e.g., in syscalls.