Pages for the stack and heap are marked as non-executable, which prevents code loaded or generated and placed there from being executed.
- protection against malicious code loaded from file or network from being executed.
- Weakened by [[Return Oriented Programming]]