KLA11289 Information disclosure vulnerability in Microsoft Downloads

An unspecified vulnerability was found in Mail, Calendar, and People in Windows 8.1 App Store. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via a specially designed e-mail message.

Original advisories

CVE-2018-8305

Related products

Microsoft-Windows-8

CVE list

CVE-2018-8305 unknown

KB list

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

Affected Products

• Mail, Calendar, and People in Windows 8.1 App Store