Hacker News Reader

Maybe it was just attacked on Windows, the only reference I can find is not super technical and references "zero-days" in the browser itself.

The sources I've seen all refer to a Windows stack-overflow / exploit.

There was a type confusion in WebKit that got code execution inside the sandbox, and then a Windows kernel vulnerability to break out.