It's an obvious fairytale about the CVE, CERT and so forth "vulnerability assessment teams/agencies". And if such a questions are keeping rising, I feel I must break your illusions into a very small and sharp glasspieces....
Remember: there's NO such things, as a collective vulnerability assessment teams/agencies like CVE, etc. Why? Too many government agencies are in vital need of the backdoor-like vulnerabilities to be in existance, to make them able to break in illegally and stealthy. Remember alot of stories like BlackHat speech cancellations, lawsuit against a person who found a backdoor in ALL Cisco, Edward Snowden just followed the supreme law of his country - the USA Constitution - and he is now on "most wanted" list. And these are the most loudly-spoken things, there are lots more - I've just not mentioning them here, but I can add some info if requested.
Even being caught - government agencies are enforcing and covering their crime-mates, like The Hacked Team. Yes, their malware was opened and opensourced by a leak. Also a Bundestrojan(er) was detected and showed to public... How many antiviruses are catching precisely that malware nowdays? even taking in account a time lag between the moment they were actually found and brought down to the public
Wake up! The only way to show that something is wrong is to say about it as louder as you can to as broader audience as you can reach. With all proves, code examples e.t.c. Only then it won't be silently disclosed and some actual steps will be in order by Vox populi. It's the only way nowdays, and that's the thing governments are fighting with - so be prepared, if you dare ;)