Google on Monday posted to the Internet a previously unpublicized flaw that could pose a security threat to users of the Microsoft Windows operating system.
Google notified both Microsoft and Adobe of zero day vulnerabilities in their software on Oct. 21, wrote Neel Mehta and Billy Leonard, members of Google's Threat Analysis Group, in an online post.
Google has a policy of making critical vulnerabilities public seven days after it informs a software maker about them. Adobe was able to fix its vulnerability within seven days; Microsoft was not.
"This [Windows] vulnerability is particularly serious because we know it is being actively exploited," wrote Mehta and Leonard.
However, Google's Chrome browser prevents exploitation of the vulnerability when running in Windows 10, they added.