Apple released patches for two publicly exploited vulnerabilities. CVE-2022-32893 is an out-of-bounds write in WebKit. Maliciously crafted web content might lead to arbitrary code execution. The second vulnerability CVE-2022-32894 is an out-of-bounds write in the kernel. An application may be able to execute arbitrary code with kernel privileges. Both vulnerabilities have probably been discovered in targeted attacks.
