Details of the security bypass bug were originally shared with Microsoft on 17 November last year  but because Microsoft wasn’t able to come up with a suitable patch within Google’s non-negotiable 90-day fix period  the security researchers made it public