Apple Paid $15K Bounty for iCloud Mail Pipeline Flaws Allowing DMARC-Passing Spoofing

Two iCloud mail parsing discrepancies enabled spoofed emails to pass all standard authentication checks for over 18 months. The disclosure highlights incomplete vendor remediation timelines and the absence of public CVE tracking for high-impact mail infrastructure flaws. Similar header handling issues remain latent risks across other cloud mail providers.