Apple discloses serious security vulnerabilities for iPhones, iPads and Macs

These new 0 day flaws are:

CVE-2022-32893 – An out-of-bounds issue in WebKit which. An attacker can trigger the flaw by tricking target devices into processing maliciously crafted web content to achieve arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

CVE-2022-32894 – An out-of-bounds issue in the OS Kernel that could be exploited by a malicious application to execute arbitrary code with the highest privileges.