There is an OS X exploitable kernel NULL pointer dereference in AppleMuxControl.kext.
882ed3c4cf58751cbf4938eb0d1c050d9a0e55f797c654e4b25181c2edfb6e6a
Apple Security Advisory 2016-05-16-4 - OS X El Capitan 10.11.5 and Security Update 2016-003 is now available and addresses code execution, PHP flaws, information leakage, and various other vulnerabilities.
033664aa28ec2879dd3701fb337746a01283cd594653ca2f21434886e857c2b1