CVE-2015-5836

CVE-2015-5836 affects Apple OS X prior to 10.11 via Apple Online Store Kit; the vulnerability is improper validation of iCloud keychain item ACLs, which could let a crafted app access keychain items. The impact is access to keychain data as described in the linked Apple security update notes and ...