Google discloses actively exploited Windows vulnerability just days after reporting it

What happened to 90 days they usually give vendor to patch their software?

 

From the link above:

 

Thnx for links @TheWindBringeth. Although I wouldn't expect MS to patch and test win32k.sys in one week. Luckily Flash was updated so exploit doesn't work any more. We can only hope that MS will release patch before new ways to exploit vulnerability are found.

 

I take you clicked through and saw this, but it might be good to surface:

 

Yes I saw this. Although in this case they could give MS more time, since Flash was patched and advicing users to update Flash would be enough to mitigate ITW exploits ( at least I read it that way).
I also don't know how users could protect themselfs against attack that targets kernel component - what steps can users take to protect against this specific vulnerability?

 

Microsoft attacks Google's Windows hack alert

 

Microsoft says Russia-linked hackers exploiting Windows flaw
Link: http://www.reuters.com/article/us-microsoft-cyber-russia-idUSKBN12W4ZK

 

https://mspoweruser.com/googles-project-zero-security-researchers-drop-another-bomb-microsoft/

 

"It affects Windows Vista Service Pack 2 all the way up to Windows 10 but fortunately requires physical access to exploit." that is probably why MS took so long .