On Windows, the Kerberos ticket renewal process can be used with CG to get an unencrypted TGT session key for a currently authenticated user leading to information disclosure.
advisories | CVE-2022-35822
Windows Credential Guard TGT Renewal Information Disclosure
