Complex sentence: Google engineer Tavis Ormandy has criticized Microsoft for taking too long to fix (patch) a reported security vulnerability in the Windows Virtual DOS Machine (VDM), which was patched 7 months after being reported to Microsoft by Mr. Ormandy.
Split into simpler sentences: Google engineer Tavis Ormandy has criticized Microsoft for taking too long to fix (patch) a reported security vulnerability. A Windows Virtual DOS Machine (VDM) vulnerability was patched 7 months after being reported to Microsoft by Mr. Ormandy.