Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally.
Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.