[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUpPNIiT3pT0La0VGXw6WRGVYwAUT_k9ewwRJ3mHprg8":3,"g5a-ex:apple\u002Fmail@*":92,"g5a-family:apple\u002Fmail":94},{"success":4,"data":5},true,{"product":6,"versions":21,"topVulnerabilitiesByEpss":24,"kevVulnerabilities":69,"seoMetadata":70,"meta":89},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":20},"apple","mail",2,7,0,"2018-05-16",[14,18],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"2.0",1,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"3.5","Mail by Apple is a technology product with 2 tracked versions and 7 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[22,23],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},[25,32,36,43,49,55,62],{"cveId":26,"description":27,"publishedDate":12,"cvssScore":28,"cvssVersion":29,"severity":30,"isKev":17,"epssScore":31},"CVE-2017-17688","The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL. NOTE: third parties report that this is a problem in applications that mishandle the Modification Detection Code (MDC) feature or accept an obsolete packet type, not a problem in the OpenPGP specification",5.9,"v3.0","Medium",0.05546,{"cveId":33,"description":34,"publishedDate":12,"cvssScore":28,"cvssVersion":29,"severity":30,"isKev":17,"epssScore":35},"CVE-2017-17689","The S\u002FMIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.",0.04222,{"cveId":37,"description":38,"publishedDate":39,"cvssScore":40,"cvssVersion":41,"severity":30,"isKev":17,"epssScore":42},"CVE-2008-0039","Unspecified vulnerability in Mail in Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary commands via a crafted file:\u002F\u002F URL.","2008-02-12",6.8,"v2",0.03247,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"cvssVersion":41,"severity":30,"isKev":17,"epssScore":48},"CVE-2010-3887","The Limit Mail feature in the Parental Controls functionality in Mail on Apple Mac OS X does not properly enforce the correspondence whitelist, which allows remote attackers to bypass intended access restrictions and conduct e-mail communication by leveraging knowledge of a child's e-mail address and a parent's e-mail address, related to parental notification of unapproved e-mail addresses.","2010-10-08",4.3,0.01203,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":53,"cvssVersion":41,"severity":30,"isKev":17,"epssScore":54},"CVE-2008-4491","Apple Mail.app 3.5 on Mac OS X, when \"Store draft messages on the server\" is enabled, stores draft copies of S\u002FMIME email in plaintext on the email server, which allows server owners and remote man-in-the-middle attackers to read sensitive mail.","2008-10-08",5,0.01198,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":41,"severity":60,"isKev":17,"epssScore":61},"CVE-2005-1505","The new account wizard in Mail.app 2.0 in Mac OS 10.4, when configuring an IMAP mail account and checking the credentials, does not prompt the user to use SSL until after the password has already been sent, which causes the password to be sent in plaintext.","2005-05-11",7.5,"High",0.01103,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":66,"cvssVersion":41,"severity":67,"isKev":17,"epssScore":68},"CVE-2005-2512","Mail.app in Mac OS 10.4.2 and earlier, when printing or forwarding an HTML message, loads remote images even when the user's preferences state otherwise, which could result in a privacy leak.","2005-08-19",2.1,"Low",0.00371,[],{"title":71,"metaDescription":72,"keywords":73,"structuredData":74},"Mail by Apple - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Mail by Apple covering 2 versions with 7 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Mail vulnerabilities, Mail security, Mail CVE, Apple Mail, Mail threat intelligence, Apple security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":75,"@type":76,"name":77,"description":72,"url":78,"manufacturer":79,"applicationCategory":83,"softwareVersion":84,"mainEntity":85},"https:\u002F\u002Fschema.org","SoftwareApplication","Mail","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fapple\u002Fmail",{"@type":80,"name":81,"url":82},"Organization","Apple","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fapple","Security Software","2 versions tracked",{"@type":86,"name":87,"description":88,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Mail Security Vulnerabilities","Security vulnerabilities affecting Mail by Apple",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":90,"apiVersion":91},"2026-10-18T20:37:29.724Z","3.0",{"rows":93,"total":11,"capped":17,"failed":11},[],[]]