CVE-2010-3887: The Limit Mail feature in the Parental Controls functionality in Mail on Apple Mac OS X does not properly e...

Security readout for executives and security teams

This CVE describes a bypass in Apple Mac OS X Mail parental controls. The Limit Mail feature may fail to enforce an approved-contact whitelist, allowing unwanted email communication if someone knows both the child’s and parent’s email addresses. Exposure appears limited to Mac OS X environments using Mail’s Parental Controls Limit Mail feature for child accounts. The source bundle does not provide exact affected versions or product CPEs, so version-specific exposure cannot be confirmed from the supplied evidence. Treat this as a targeted safety and policy-control issue, not a broad system compromise. Prioritize if your organization manages child accounts, education systems, or supervised devices that depend on Mail parental controls. Mitigation focus: Check Apple guidance for affected Mac OS X versions and historical fixes.; Do not rely on Limit Mail as the only control for child email restrictions.; Consider disabling Mail access for child accounts where whitelist enforcement is required..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.