From https://www.blackhat.com/us-14/archives.html#extreme-privilege-escalation-on-windows-8-uefi-systems: "Vulnerability Disclosure & Vendor Response" is on pp. 45-48 of the slides. Also see Vulnerability Note VU#552286: UEFI EDK2 Capsule Update vulnerabilities.