Launchpad.net

CVE 2016-4639

Login Window in Apple OS X before 10.11.6 does not properly initialize memory, which allows local users to cause a denial of service via unspecified vectors.

See the CVE page on Mitre.org for more details.