The two were able to broadcast a special message across a MacBook Pro’s Touch Bar by chaining together five bugs, a use-after-free in Safari, three logic bugs and a null pointer dereference, something which allowed them to elevate to root in macOS.