The disclosure-to-exploit window used to be measured in weeks; for weaponized vulnerabilities, it now runs in hours. Out-of-cycle patches that used to be exceptional have become routine across enterprise environments of meaningful size.
This pattern now has a name. You might have heard it already: the Patch Apocalypse. Sounds a bit dramatic, but the impact warrants the drama.