There is an OS X exploitable kernel NULL pointer dereference in AppleGraphicsDeviceControl.
fff8a4440decd556ffa6cebdc500fc713db56d8a1a1d8bb199d49b0b849765b5
Apple Security Advisory 2016-05-16-4 - OS X El Capitan 10.11.5 and Security Update 2016-003 is now available and addresses code execution, PHP flaws, information leakage, and various other vulnerabilities.
033664aa28ec2879dd3701fb337746a01283cd594653ca2f21434886e857c2b1