To fix the zero-day vulnerability Apple has released Safari 15.6.1 for macOS Big Sur and Catalina.

[{ "selector": ".obgtf-a", "duration": "250ms", "fill": "forwards", "delay": "750ms", "keyframes": [ {"offset": 0, "opacity": 0}, {"offset": 1, "opacity": "100%"} ] }, { "selector": ".libas-a", "duration": "500ms", "fill": "forwards", "delay": "500ms", "keyframes": [ {"offset": 0, "transform": "translateX(calc(360px - 335px)) rotate(580deg)", "opacity": "1"}, {"offset": 1, "transform": "translateX(0) rotate(0deg)", "opacity": "1"} ] }, { "selector": ".bibsw-a", "duration": "250ms", "fill": "forwards", "delay": "500ms", "keyframes": [ {"offset": 0, "opacity": 0}, {"offset": 1, "opacity": "1"} ] }]

Zero-Day Patched Today is an out-of-bound writing issue in webkit

[{ "selector": ".lnanr-a", "duration": "250ms", "fill": "forwards", "delay": "750ms", "keyframes": [ {"offset": 0, "opacity": 0}, {"offset": 1, "opacity": "100%"} ] }, { "selector": ".tqmoz-a", "duration": "500ms", "fill": "forwards", "delay": "500ms", "keyframes": [ {"offset": 0, "transform": "translateX(calc(360px - 335px)) rotate(580deg)", "opacity": "1"}, {"offset": 1, "transform": "translateX(0) rotate(0deg)", "opacity": "1"} ] }, { "selector": ".pkjcn-a", "duration": "250ms", "fill": "forwards", "delay": "500ms", "keyframes": [ {"offset": 0, "opacity": 0}, {"offset": 1, "opacity": "1"} ] }]

An out-of-bound write vulnerability occurs when an attacker can supply input to a program that causes it to write data before or before the end of the memory buffer

[{ "selector": ".ezrtq-a", "duration": "250ms", "fill": "forwards", "delay": "750ms", "keyframes": [ {"offset": 0, "opacity": 0}, {"offset": 1, "opacity": "100%"} ] }, { "selector": ".igebb-a", "duration": "500ms", "fill": "forwards", "delay": "500ms", "keyframes": [ {"offset": 0, "transform": "translateX(calc(360px - 335px)) rotate(580deg)", "opacity": "1"}, {"offset": 1, "transform": "translateX(0) rotate(0deg)", "opacity": "1"} ] }, { "selector": ".raebo-a", "duration": "250ms", "fill": "forwards", "delay": "500ms", "keyframes": [ {"offset": 0, "opacity": 0}, {"offset": 1, "opacity": "1"} ] }]

This causes the program to crash, corrupt the data, or in the worst case lead to the execution of remote code.

[{ "selector": ".pwqzb-a", "duration": "250ms", "fill": "forwards", "delay": "750ms", "keyframes": [ {"offset": 0, "opacity": 0}, {"offset": 1, "opacity": "100%"} ] }, { "selector": ".cftag-a", "duration": "500ms", "fill": "forwards", "delay": "500ms", "keyframes": [ {"offset": 0, "transform": "translateX(calc(360px - 335px)) rotate(580deg)", "opacity": "1"}, {"offset": 1, "transform": "translateX(0) rotate(0deg)", "opacity": "1"} ] }, { "selector": ".fzizt-a", "duration": "250ms", "fill": "forwards", "delay": "500ms", "keyframes": [ {"offset": 0, "opacity": 0}, {"offset": 1, "opacity": "1"} ] }]

Apple says they fixed the bug through better border checks

[{ "selector": ".qmjbj-a", "duration": "250ms", "fill": "forwards", "delay": "750ms", "keyframes": [ {"offset": 0, "opacity": 0}, {"offset": 1, "opacity": "100%"} ] }, { "selector": ".uisrw-a", "duration": "500ms", "fill": "forwards", "delay": "500ms", "keyframes": [ {"offset": 0, "transform": "translateX(calc(360px - 335px)) rotate(580deg)", "opacity": "1"}, {"offset": 1, "transform": "translateX(0) rotate(0deg)", "opacity": "1"} ] }, { "selector": ".buzqp-a", "duration": "250ms", "fill": "forwards", "delay": "500ms", "keyframes": [ {"offset": 0, "opacity": 0}, {"offset": 1, "opacity": "1"} ] }]

Apple said the vulnerability was revealed by a researcher who wants to remain anonymous

[{ "selector": ".xcskq-a", "duration": "250ms", "fill": "forwards", "delay": "750ms", "keyframes": [ {"offset": 0, "opacity": 0}, {"offset": 1, "opacity": "100%"} ] }, { "selector": ".twstf-a", "duration": "500ms", "fill": "forwards", "delay": "500ms", "keyframes": [ {"offset": 0, "transform": "translateX(calc(360px - 335px)) rotate(580deg)", "opacity": "1"}, {"offset": 1, "transform": "translateX(0) rotate(0deg)", "opacity": "1"} ] }, { "selector": ".npizj-a", "duration": "250ms", "fill": "forwards", "delay": "500ms", "keyframes": [ {"offset": 0, "opacity": 0}, {"offset": 1, "opacity": "1"} ] }]

This zero-day vulnerability is the same as what Apple did yesterday for macOS Monterey and iPhone/iPhone. Patch was done for iPads

[{ "selector": ".prafl-a", "duration": "250ms", "fill": "forwards", "delay": "750ms", "keyframes": [ {"offset": 0, "opacity": 0}, {"offset": 1, "opacity": "100%"} ] }, { "selector": ".ekmtl-a", "duration": "500ms", "fill": "forwards", "delay": "500ms", "keyframes": [ {"offset": 0, "transform": "translateX(calc(360px - 335px)) rotate(580deg)", "opacity": "1"}, {"offset": 1, "transform": "translateX(0) rotate(0deg)", "opacity": "1"} ] }, { "selector": ".braql-a", "duration": "250ms", "fill": "forwards", "delay": "500ms", "keyframes": [ {"offset": 0, "opacity": 0}, {"offset": 1, "opacity": "1"} ] }]

Apple released macOS Monterey 12.5.1, iOS 15.6.1, and iPadOS 15.6.1 yesterday, including improvements for both webkit and kernel vulnerabilities.

[{ "selector": ".tosku-a", "duration": "250ms", "fill": "forwards", "delay": "750ms", "keyframes": [ {"offset": 0, "opacity": 0}, {"offset": 1, "opacity": "1"} ] }, { "selector": ".qkmrr-a", "duration": "350ms", "fill": "forwards", "delay": "1000ms", "keyframes": [ {"offset": 0, "transform": "translateY(calc(600px - 548px))", "opacity": "1"}, {"offset": 1, "transform": "translateY(0)", "opacity": "1"} ] }, { "selector": ".guasi-a", "duration": "500ms", "fill": "forwards", "delay": "500ms", "keyframes": [ {"offset": 0, "transform": "translateX(calc(360px - 335px)) rotate(580deg)", "opacity": "1"}, {"offset": 1, "transform": "translateX(0) rotate(0deg)", "opacity": "1"} ] }, { "selector": ".kklis-a", "duration": "500ms", "fill": "forwards", "delay": "500ms", "keyframes": [ {"offset": 0, "transform": "translateX(-43px) rotate(-580deg)", "opacity": "1"}, {"offset": 1, "transform": "translateX(0) rotate(0deg)", "opacity": "1"} ] }, { "selector": ".zxwnl-a", "duration": "500ms", "fill": "forwards", "delay": "500ms", "keyframes": [ {"offset": 0, "transform": "translateX(-213px) rotate(-580deg)", "opacity": "1"}, {"offset": 1, "transform": "translateX(0) rotate(0deg)", "opacity": "1"} ] }, { "selector": ".ebbkc-a", "duration": "250ms", "fill": "forwards", "delay": "500ms", "keyframes": [ {"offset": 0, "opacity": 0}, {"offset": 1, "opacity": "1"} ] }]