CVE-2010-3887

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-10-08 · updated 2026-06-16
Weakness: CWE-264

Description

The Limit Mail feature in the Parental Controls functionality in Mail on Apple Mac OS X does not properly enforce the correspondence whitelist, which allows remote attackers to bypass intended access restrictions and conduct e-mail communication by leveraging knowledge of a child's e-mail address and a parent's e-mail address, related to parental notification of unapproved e-mail addresses.

Affected products

Apple Mail: all versions

References

http://blog.kamens.us/2010/08/03/mac-os-x-mail-parental-controls-vulnerability/
http://blog.kamens.us/2010/08/03/mac-os-x-mail-parental-controls-vulnerability/

Get alerted when CVE-2010-3887 or the next vulnerability affects your stack