Apple · Spotlight · CVE-2014-4453
**Name of the Vulnerable Software and Affected Versions**
Apple iOS versions prior to 8.1.1
Apple OS X versions prior to 10.10.1
**Description**
The issue allows remote attackers to obtain sensitive information via unspecified vectors, as location data is included during the establishment of a Spotlight Suggestions server connection by Spotlight or Safari.
**Recommendations**
For Apple iOS versions prior to 8.1.1, update to version 8.1.1 or later to resolve the issue.
For Apple OS X versions prior to 10.10.1, update to version 10.10.1 or later to resolve the issue.