Sounds more like project zero didn't bother looking for xp exploits, not that they don't exist. My understanding is project zero is about finding new zero days

Sounds more like project zero didn't bother looking for xp exploits, not that they don't exist. My understanding is project zero is about finding new zero days, not cataloging known vulnerabilities.