Fours days? Not soon enough for Apple :)
@simontsui Yup, I saw it earlier.
I asked Apple and Google if the bugs being reported by Google Project Zero might be due to itw exploitation, just in case Apple forgot to mention it in their advisories. Nope :)
@serghei lol, Apple is usually forthcoming when “Apple is aware of reports that an exploit for this issue exists in the wild.”
Google Project Zero does have a repository of Root Cause Analyses hidden on GitHub. EDIT: https://googleprojectzero.github.io/0days-in-the-wild/rca.html