CVE-2016-4742
NSSecureTextField in Apple OS X before 10.12 does not enable Secure Input, which allows attackers to discover credentials via a crafted app.
Date published : 2016-09-25
http://lists.apple.com/archives/security-announce/2016/Sep/msg00006.html