Ask HN: How do browsers secure themselves from being compromised?

I may not be 100% right about SSL, but from what I know, if you are using SSL, the data is encrypted at the browser and decrypted at the web server and vice versa. If you are in the same network you can read what's being sent between the browser and webserver (not 100% sure about this), but because it is encrypted you cannot decipher it.

I guess this means that if your browser is compromised though, you can read what's being sent or received.

So then, what are some known attack methods to the browser that modern browsers protect?