Sunday April 24, 2011

Microsoft Issues 3rd Party Bug Advisories

In a surprising move on Microsoft’s part, the company has made public a set of guidelines for its vulnerability disclosure policy, which governs 3rd party bug warnings. Microsoft will begin issuing warnings on bugs and exploits of other vendors only after the company has been made aware of the problem and have time to react to correct the flaw.

Today's advisories were part of a larger announcement by Microsoft that made public details of its bug policy, which it dubbed "coordinated vulnerability disclosure," or CVD, almost nine months ago.

Comments