Apple fixes new zero-day exploited to hack macOS, iOS devices | Bleeping Computer

Apple has issued security patches to address two zero-day vulnerabilities, one of which has been openly published and the other of which has been manipulated in the field by hackers to get access to iPhones and Macs. A memory corruption flaw in the IOMobileFrameBuffer that impacts iOS, iPadOS, and macOS Monterey is the first zero-day fixed today (tagged as CVE-2022-22587) [1, 2]. On infected devices, full disclosure of this flaw results in arbitrary code execution with kernel privileges. iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, iPod touch (7th generation), and macOS Monterey are all affected products. 

Source: https://www.bleepingcomputer.com/news/apple/apple-fixes-new-zero-day-exploited-to-hack-macos-ios-devices/