A clear timeline would be useful to have. When was this originally reported to Microsoft, when did they reply, how much back-and-forth was involved, was a proof

A clear timeline would be useful to have. When was this originally reported to Microsoft, when did they reply, how much back-and-forth was involved, was a proof-of-concept of the attack sent to Microsoft, when was the fix released, and what version has the fix?