Well, Google has been sending Microsoft (and other vendors) lots of other bug reports: https://code.google.com/p/google-security-research/issues/list?can=1&sort

Well, Google has been sending Microsoft (and other vendors) lots of other bug reports: https://code.google.com/p/google-security-research/issues/list?can=1&sort=-id https://code.google.com/p/google-security-research/issues/li... What I find interesting is that there are at least a couple of cases in which bugs were marked as being subject to the 90-day disclosure deadline, but not made publicly visible until days or weeks after the deadline had passed. https://code.google.com/p/google-security-research/issues/detail?id=111 https://code.google.com/p/google-security-research/issues/de... https://code.google.com/p/google-security-research/issues/detail?id=113 https://code.google.com/p/google-security-research/issues/de...