The renown german IT website Heise says that Apple can take months to fix a known security vulnerability. Microsoft on the other hand, takes threat reports very seriously. They encourage communication with the 'community' in providing security patches. "Replies from Apple are not to be taken for granted," they say.
Third-party security companies generally provide protection from newly discovered threats quite fast.