On Microsoft Windows, the FSCTL_FIND_FILES_BY_SID control code does not check for permissions to list a directory leading to disclosure of file names when a user is not granted FILE_LIST_DIRECTORY access.
be5f41f514a5827a0f821f666b99bf1814733a5f65b5368d166452c4a0dca392