Hacker News Reader

The sources I've seen all refer to a Windows stack-overflow / exploit.

There was a type confusion in WebKit that got code execution inside the sandbox, and then a Windows kernel vulnerability to break out.