Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.
CWE-908