PackageKit provided detailed error messages to unprivileged callers that exposed information about file presence and mimetype of files that the user would be unable to determine on its own.
https://www.eyecontrol.nl/blog/the-story-of-3-cves-in-ubuntu-desktop.html
https://bugs.launchpad.net/ubuntu/+source/packagekit/+bug/1888887