Apple patched a ‘actively exploited’ zero-day security vulnerability that affects the majority of iPhones

Apple has confirmed that a two-week-old iPhone software update fixed a zero-day security vulnerability that it now claims was actively exploited.

The iOS 16.1.2 update arrived on November 30 and was distributed to all supported iPhones, including the iPhone 8 and later, with unspecified “important security updates.” Apple stated on Tuesday that the update fixed a flaw in WebKit, the browser engine that powers Safari and other apps, that if exploited could allow malicious code to run on the person’s device. The bug is known as a zero-day because the vendor has only one day to fix the vulnerability.