Apple has released an emergency update to patch two (2) critical zero-day vulnerabilities that have been exploited in-the-wild. These bugs affect Mac computers running macOS Monterey, iPhones 6s and later, and most iPads. The flaws are an out-of-bounds write vulnerability (tracked as CVE-2022-22674), and an out-of-bounds read vulnerability (tracked as CVE-2022-22675), and if exploited these flaws could allow an attacker to execute arbitrary code on vulnerable devices with kernel privileges. Apple has stated that these flaws have been actively exploited, and they do have proof-of-concept (PoC) exploits, but they are not currently publishing the details, in lieu of giving Apple users more time to install the update on their vulnerable devices. If relevant details about the exploits become public, the Ankura CTIX will publish updates in future FLASH reports. As stated, these vulnerabilities have been patched with improved input validation and bounds checking, and Apple users are urged to update their operating systems to iOS 15.4.1, iPadOS 15.4.1, and macOS Monterey 12.3.1 immediately.