The researcher found that he could gain unauthorized camera access via a shared iCloud document that could also “hack every website you’ve ever visited.”
https://threatpost.com/apple-bug-bounty-mac-webcam-hack/178114/
Discussion related to Vulnerabilities