CVE-2018-4329

HIGH

Safari < 12 - Incomplete History Deletion via Redirect Chains

Title source: llm
STIX 2.1

Description

Clearing a history item may not clear visits with redirect chains. The issue was addressed with improved data deletion. This issue affected versions prior to iOS 12, Safari 12.

References (2)

Core 2
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/kb/HT209106
Vendor Advisory x_refsource_misc
https://support.apple.com/kb/HT209109

Scores

CVSS v3 7.5
EPSS 0.0121
EPSS Percentile 65.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-19
Status published
Products (2)
apple/iphone_os < 12.0
apple/safari < 12
Published Apr 03, 2019
Tracked Since Feb 18, 2026