Interesting question. I think it's fairly reasonable to assume that:

1) The NSA knew about it and had exploits for it. 2) Google Project Zero spoke with the NSA prior to releasing the advisory.

An exploit for such a pervasive vulnerability represents a susbtantial asset to one intelligence agency. Right up until the enemy discovers and develops the same capability.