It's typically not immediately after it's fixed, but usally about a week or so, to let the majority update. The vendor can also usually request an extension, a

It's typically not immediately after it's fixed, but usally about a week or so, to let the majority update. The vendor can also usually request an extension, as per the Project Zero guidelines, of I believe 1 month if they confirm to be actively working on a patch. The goal of responsible disclosure is to help the vendor and their users' be more secure, so having a policy that is balence between the two is important to let the vendor fix it, and to not let the users be possibly hacked