I though zero-day meant actively being exploited in the wild before a patch is available?

Zero day means that there is zero days between a patch being available and the vulnerability being disclosed (as opposed to the patch being available before disclosure).