CVE-2018-8305: Microsoft Windows Calendar

Medium severity, CVSS 6.5. EPSS: 8.4% chance of exploitation in the next 30 days.

An information disclosure vulnerability exists in Windows Mail Client when a message is opened, aka "Windows Mail Client Information Disclosure Vulnerability." This affects Mail, Calendar, and People in Windows 8.1 App Store.

Affected products

• Microsoft Windows Calendar: affected versions not specified
• Microsoft Windows Mail: affected versions not specified
• Microsoft Windows People: affected versions not specified

Published 2018-07-11. Last modified 2026-06-17.