The File Bookmark component in Apple OS X prior to 10.11.2 allows malicious users to bypass a sandbox protection mechanism for app scoped bookmarks via a crafted pathname.
apple mac os x