All vendors should have a plan for rapid remediation in the case of active exploitation.

Here’s some emergency fix strategies we’ve seen over the years:

https://projectzero.google/2026/10/emergency-patching.html