A few months ago, Google Project Zero discovered a bunch of security exploits in iOS versions from 10.0 up to 12.1.3 that cover a total of 1.4 billion devices.
Last week, they published their findings in more detail. What part did JavaScript play in the incident?