A company like Microsoft only releases new software rarely - e.g. in Microsoft cases, patches are bundled once a month. If you report a bug just before the bundle comes out, their earlier possible [1] response is ~35 days, anyway.
[1] Of course, "possible" depends on how much pressure you put on them, which is the whole argument of the Full-Disclosure camp...
[1] Of course, "possible" depends on how much pressure you put on them, which is the whole argument of the Full-Disclosure camp...