Apple has just released an emergency security advisory following the patch of five (5) vulnerabilities including a critical zero-day vulnerability that has been actively exploited in the wild. The zero-day flaw, tracked as CVE-2022-32917, is an out-of-bounds write vulnerability in the Kernel component, caused when the operating system writes data past the end, or before the beginning of an intended memory buffer. This causes memory corruption and can crash the affected system or allow for code execution. To exploit this vulnerability, an attacker could craft a malicious application to perform arbitrary code execution against a vulnerable device with kernel privileges. Along with this zero-day vulnerability, and the other four (4) newly patched flaws, Apple has backported patches for a critical zero-day out-of-bounds write vulnerability initially patched on August 31, 2022. This flaw, which is tracked as CVE-2022-32894, also affected the operating system’s kernel and was exploited via maliciously crafted applications allowing for arbitrary code execution with kernel privileges. The backport included in this patch was updated to remediate the operating systems of Mac computers running macOS Big Sur. CVE-2022-32917 marks the eighth (8) zero-day flaw patched by Apple since January 2022. Vulnerabilities that allow for arbitrary code execution, especially with elevated privileges, pose a significant threat to Apple users as well as the enterprise organizations implementing Apple infrastructure. CTIX analysts recommend that iOS users and macOS administrators ensure they have downloaded the latest patch and continue to monitor Apple’s security updates page to be aware of any other emergency advisories patching critical flaws and zero-day vulnerabilities in the future. CTIX analysts will monitor the exploitation of this flaw and may publish an update to this piece in the near future.