Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.
CWE-862