Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network.
Improper neutralization of special elements used in a command ('command injection') in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.