The Google Threat Analysis Group (TAG) has revealed that of the nine zero-day vulnerabilities affecting Chrome, Android, Apple and Microsoft that it reported in 2021, five were in use by a single commercial surveillance company. Did I hear someone say Pegasus? An educated guess, but wrong in this case.
Link: Zero-day vulnerabilities in Chrome and Android exploited by commercial spyware
via blog.malwarebytes.com