Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.
CWE-497, CWE-908