One zero-day addressed has been observed in active attacks