Apple has issued a bushel of security updates and warned that three of the flaws it's fixed are under active attack.
CVE-2023-32409 means"A remote attacker may be able to break out of Web Content sandbox." Clément Lecigne of Google's Threat Analysis Group and Donncha Ó Cearbhaill of Amnesty International's Security Lab found the flaw.CVE-2023-28204 is described as"Processing web content may disclose sensitive information."
All three are found in iPhone 8 and later, all models of iPad Pro, iPad Air from its third generation to current models, iPads from the fondleslab's fifth gen to the present, and iPad minis from fifth generation machines to the present.