Project zero on CVE fixes

This article talks about how long it takes a security hole to be patched

In 2021, vendors took an average of 52 days to fix security vulnerabilities reported from Project Zero. This is a significant acceleration from an average of about 80 days 3 years ago.

while its getting better it still is quite a bit of time to get them patches