Exactly what I was thinking ...

    But are these vulnerabilities actually useful to attackers?

I thought the idea is that they are finding them before they are used in the wild -- how would an unfound vulnerability be useful to an attacker?