CVE-2014-4453
No fix known EPSS 2%
Apple iOS before 8.1.1 and OS X before 10.10.1 include location data during establishment of a Spotlight Suggestions server connection by Spotlight or Safari, which might allow remote attackers to obtain sensitive information via unspecified vectors.
Products: apple iphone_os, apple mac_os_x