Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally.
CWE-908