Previously, Google has been getting negative feedback for not giving a grace period in the event of an imminent update being released to patch a vulnerability.

Previously, Google has been getting negative feedback for not giving a grace period in the event of an imminent update being released to patch a vulnerability. As a result, they added a grace period to prevent such situations from happening. In this instance, Cisco, the vendor, communicated that they would not want to use the grace period and published the vulnerability on their own website despite Google communicating that they could have waited.