On Monday, Google disclosed a zero-day vulnerability in Windows, which if exploited will enable an attacker to use it as a security sandbox escape. In response, Microsoft didnt offer details on a fix, instead choosing to promote Windows 10 and argue for coordinated disclosure. Google normally has a 60-day limit on disclosure, which starts form the time they discover a given vulnerability and notify the vendor. When the vulnerability is being actively exploited, Google will wait seven days before disclosing. A patch for the flaw will be released on November 8.”]

