Zack Whittaker / TechCrunch:
Apple confirms iOS 16.1.2, released on November 30, fixed a WebKit zero-day flaw, found and reported by Google, that allowed RCE and was actively exploited — Apple has confirmed that an iPhone software update it released two weeks ago fixed a zero-day security vulnerability that it now says was actively exploited.
File source