CVE-2016-7628 (mac_os_x)
An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "Assets" component, which allows local users to bypass intended permission restrictions and change a downloaded mobile asset via unspecified vectors.
Source: CVE-2016-7628 (mac_os_x)