Mandiant and Google identified a significant jump in 2021 in security vulnerabilities that threat actors exploited before a patch became available.
https://www.securitymagazine.com/articles/97482-threat-actors-exploited-more-zero-day-vulnerabilities-in-2021