Apple has fixed two vulnerabilities in Safaris WebKit component, announcing it is aware of a report that they may have been actively exploited. Both vulnerabilities could be abused by maliciously crafted web content that could lead to arbitrary code execution: In other words, the bugs let rogue websites do things on your phone without your permission. This is the 9th actively-exploited zero-day patched by Apple this year. Seven of them were related to WebKit, one was a GateKeeper bypass, and the other a TCC bypass.”]