An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka ‘Connected User Experiences and Telemetry Service Information Disclosure Vulnerability’.
CWE-1386
CVE-2021-26426
Windows User Account Profile Picture Elevation of Privilege Vulnerability
