I have a VLC crash here that is rated as "PROBABLY_EXPLOITABLE" by !exploitable. Whats the policy for disclosing it safely. Do I need to privately disclose it somewhere to stop the security risk of someone creating an exploit for it before its patched or? Regards, Daniel