That’s how I read it. GPT was given the CVE list and could use zero days accordingly.