Nearly 1 in 4 Exploited Vulnerabilities Are Attacked Before or on Disclosure Day