Re:Google Goes Public with Unpatched Microsoft Edge and IE V...
by Ajedi32 on Tuesday February 28, 2017 @03:17PM
(#13757443)
Not sure about 90 days specifically, but as far as the general principle goes, yes: https://en.wikipedia.org/wiki/Responsible_disclosure
Is this a common pattern in the bugs world ? publicizing a critical bug after 90 days of no response ?