I don't think this is the case here though. It's been a few days since reporting the vulnerability, not months.

We don't yet know if this was being widely exploited (versus being a niche exploit used by an APT, for example), but it will be now either way.