"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2.

The version of Apple iOS running on the mobile device is prior to 12.1.1. It is, therefore, affected by multiple vulnerabilities. The highest of which could allow an attacker to perform a remote code execution attack by enticing a user to view malicious web content.

The version of Apple Safari installed on the remote host is prior to 12.0.2. It is, therefore, affected by the following vulnerabilities :

 - Input-validation errors exist that allow memory corruption leading to arbitrary code execution. (CVE-2018-4437, CVE-2018-4438, CVE-2018-4441, CVE-2018-4442, CVE-2018-4443, CVE-2018-4464)

Note that other flaws exist that allow information disclosure and address bar spoofing.

The version of Apple iOS running on the mobile device is prior to 12.1. It is, therefore, affected by multiple vulnerabilities. The highest of which could allow an attacker to perform a remote code execution attack by enticing a user to view malicious web content.

The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 12.0.2. It is, therefore, affected by the following vulnerabilities :

  - Input-validation errors exist that allow memory     corruption leading to arbitrary code execution.
    (CVE-2018-4437, CVE-2018-4438, CVE-2018-4441,     CVE-2018-4442, CVE-2018-4443, CVE-2018-4464)

Note that other flaws exist that allow information disclosure and address bar spoofing.

ID	Name	Product	Family	Type	Severity
700555	Apple iOS < 12.1.1 Multiple Vulnerabilities (APPLE-SA-2018-12-05-1)	Nessus Network Monitor	Mobile Devices		medium
700507	Apple Safari < 12.0.2 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients		high
119610	Apple iOS < 12.1.1 Multiple Vulnerabilities	Nessus	Mobile Devices	Local	high
119498	macOS : Apple Safari < 12.0.2 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	Local	high

Detections

Analytics

CVE-2018-4445

medium

Tenable Plugins

medium

high

high

high