The zero-day vulnerability, classified as CVE-2022-42827, exists inside the operating system kernel, which is the central component. iOS 16.1 and iPadOS 16 are rolling out now.
Apple confirms the active exploitation of CVE-2022-42827, warning in a barebones advisory that the flaw exposes iPhones and iPads to arbitrary code execution attacks.