Login Window in Apple OS X prior to 10.11.6 allows malicious users to gain privileges via a crafted app that leverages a "type confusion."
apple mac os x