Heres a technical writeup on ForcedEntry, the delivery vector for Pegasus, its a zero-click sandbox escape on iOS 13 and 14. Its pretty incredible, since the environment has no scripting capibilities, it bring along its own emulated computer architecture where it can execute code

https://googleprojectzero.blogspot.com/2022/03/forcedentry-sandbox-escape.html?m=1