> it's certainly possible that there are entire categories of privately known vulnerabilities which are not even on the public radar This happened many times f

> it's certainly possible that there are entire categories of privately known vulnerabilities which are not even on the public radar This happened many times for both closed on open source projects. Not surprisingly, given how much is paid for a 0-day.