Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally.
CWE-200, CWE-908