Security advisory page:

If you wish to report a security issue to the community, please refer to the process on the Reporting Security Issues page.


The list of EDK II Security Advisories can be found at this Gitbook: Security Advisory Log