Windows Graphics Component Information Disclosure Vulnerability

According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?
In this case, a successful attack could be performed from a low privilege AppContainer. The attacker could get unauthorized access to sensitive user data outside of the AppContainer execution environment.

What type of information could be disclosed by this vulnerability?
Exploiting this vulnerability could allow the disclosure of initialized or uninitialized memory in the process heap.

Security updates
10.0.17763.3770 — https://support.microsoft.com/help/5021237
10.0.19043.2364 — https://support.microsoft.com/help/5021233
10.0.20348.1366 — https://support.microsoft.com/help/5021249
10.0.22000.1335 — https://support.microsoft.com/help/5021234
10.0.22621.993 — https://support.microsoft.com/help/5021255
10.0.10240.19624 — https://support.microsoft.com/help/5021243
10.0.14393.5582 — https://support.microsoft.com/help/5021235
6.3.9600.20721 — https://support.microsoft.com/help/5021294
6.3.9600.20721 — https://support.microsoft.com/help/5021296
6.2.9200.24018 — https://support.microsoft.com/help/5021285
6.2.9200.24018 — https://support.microsoft.com/help/5021303