Use after free in Windows System Events Broker allows an authorized attacker to disclose information locally.
CWE-416, CWE-822