CVE-2010-3887: Apple Mail

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

The Limit Mail feature in the Parental Controls functionality in Mail on Apple Mac OS X does not properly enforce the correspondence whitelist, which allows remote attackers to bypass intended access restrictions and conduct e-mail communication by leveraging knowledge of a child's e-mail address and a parent's e-mail address, related to parental notification of unapproved e-mail addresses.

Affected products

• Apple Mail: any version

Published 2010-10-08. Last modified 2026-06-16.