it is highly likely they knew about the issue before the zero day. if they are aware of an issue but it is not public they will patch it within the 3 month cycl

it is highly likely they knew about the issue before the zero day. if they are aware of an issue but it is not public they will patch it within the 3 month cycle. if it becomes public then they are forced to patch it.