CoreDisplay in Apple OS X prior to 10.12 allows malicious users to view arbitrary users' screens by leveraging screen-sharing access.
apple mac os x