Improper access control in PENUP prior to version 3.9.19.32 allows local attackers to access files with PENUP privilege.
Improper access control vulnerability in PENUP prior to version 3.8.00.18 allows arbitrary webpage loading in webview.