Not "known", but "disclosed" to the public, or at least those responsible for a patch.

Zero days are known, exploited and used all the time by all sorts of black hats, govt institutions etc.