Windows COM Server Information Disclosure Vulnerability

According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?
In this case, a successful attack could be performed from a low privilege AppContainer. The attacker could get unauthorized access to sensitive user data outside of the AppContainer execution environment.

What type of information could be disclosed by this vulnerability?
An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.

Security updates
10.0.17763.6775 — https://support.microsoft.com/help/5050008
10.0.20348.3091 — https://support.microsoft.com/help/5049983
10.0.19044.5371 — https://support.microsoft.com/help/5049981
10.0.22621.4751 — https://support.microsoft.com/help/5050021
10.0.26100.2894 — https://support.microsoft.com/help/5050009
10.0.25398.1369 — https://support.microsoft.com/help/5049984
10.0.10240.20890 — https://support.microsoft.com/help/5050013
10.0.14393.7699 — https://support.microsoft.com/help/5049993
6.0.6003.23070 — https://support.microsoft.com/help/5050063
6.0.6003.23070 — https://support.microsoft.com/help/5050061
6.1.7601.27520 — https://support.microsoft.com/help/5050049
6.1.7601.27520 — https://support.microsoft.com/help/5050006
6.2.9200.25273 — https://support.microsoft.com/help/5050004
6.3.9600.22371 — https://support.microsoft.com/help/5050048