Or do you mean
"It is quite shocking how many 0-day vulnerabilities other software companies don't fix"