3 ms·

It was a 0-day exploit. The patch wasn't released until March 2nd but the vulnerability was being exploited at least since January.