Comment by ga-vu

They're not zero-days if they've been privately disclosed and patches are available.