Use of uninitialized resource in Windows Broker Infrastructure Service allows an authorized attacker to disclose information locally.
CWE-200, CWE-908