Google’s Project Zero changes vulnerability disclosure policy

Google’s Project Zero team announces a shift in its vulnerability disclosure policy.

Published 52m1 sourceNotableupdated 45m

≈ 18sSpeed

The fact

The new rules extend the standard 90-day deadline for vendors to fix flaws.

Exceptions now include cases where fixes are not feasible or could cause instability.

Click the link to read an article on the topic:

Explore this topic

Auto-synthesis from 1 media source · identified on November 13, 2026