Use of uninitialized resource in Windows Text Services Framework allows an authorized attacker to disclose information locally.
CWE-908