Coordinated Vulnerability Disclosure

A process in which a researcher privately reports a vulnerability to the vendor and both agree a timeline for a fix before details are published. Disputes arise when exploitation forces disclosure before the vendor has confirmed or patched the flaw.