The bug has been under active attack as a zero-day.
Source: Threadpost