Esme Povirk (@madewokherd) commented about dlls/uiautomationcore/uia_event.c:
{ int i;
if (event->event_map_entry)
uia_event_map_entry_release(event->event_map_entry);
Can this happen? I think the event_map_entry would always hold a reference to the event.