A memory issue affects myriad iPhone, iPad and MacOS devices and allows attackers to execute arbitrary code after processing malicious web content.
https://threatpost.com/apple-patches-actively-exploited-webkit-zero-day/178370/
The large January 2022 Patch Tuesday update covers nine critical CVEs, including a self-propagator with a 9.8 CVSS score.
https://threatpost.com/microsoft-wormable-critical-rce-bug-zero-day/177564/