CVE-2016-4742

CVE-2016-4742 describes a vulnerability in NSSecureTextField within Apple OS X prior to version 10.12, where the Secure Input feature was not enabled. This oversight allows a malicious, crafted application to potentially capture user credentials. Rated Medium with a CVSS score of 5.5, the vulnerability requires local access and user interaction (UI:R) for an attacker to achieve high confidentiality impact (C:H). There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB are all none), or significant community discussion or media coverage surrounding this CVE.