Google's Project Zero Now Gives Vendors Grace Period

If vendors indicate that they'll have a patch for an exploit ready to go within 14 days of Project Zero's previous 90-day deadline, Google won't publish the exploit publicly.

via PCMag.com Software Product Guide