Out-of-bounds read in Secondary Logon allows an authorized attacker to disclose information locally.