Google is making changes to Project Zero, its vulnerability discovery and disclosure scheme intended to promote security improvements in operating systems and other programs, giving companies more leniency in terms of time to develop patches for their software. In a number of cases, vulnerability disclosures will take place later than the fixed 90-day deadline, giving companies up to 14 more days to roll out a fix to their customers.
