In new updates to Apple devices, the company has patched two zero-day security vulnerabilities with new softwares. According to its blog post, “Apple is aware of a report that this issue may have been exploited against versions of iOS before iOS 16.7.1, ” and was actively exploited.

Researcher Clément Lecigne of Google’s Threat Analysis Group (TAG) discovered the security flaws, exposing the zero-day bugs against high-risk individuals, like politicians, journalists and dissidents. While Apple didn’t provide details on the nature of the bugs, the two security flaws was affecting WebKit, Apple’s open-source browser framework powering Safari.

Apple said the first bug was “processing web content may disclose sensitive information,” while the second was “processing web content may lead to arbitrary code execution.” The new security update covers “iPhone XS and later, iPad Pro 12.9-inch 2nd generation and later, iPad Pro 10.5-inch, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 6th generation and later, and iPad mini 5th generation and later.”