325
Threat actors exploited Windows 0-day for more than a year before Microsoft fixed it
(arstechnica.com)
This is a most excellent place for technology news and articles.
My understanding, zero day means when the exploit was discovered it was already being used in the wild. This is different from an exploit discovered by a bounty program or by security researchers.