Sort:  

The defenders have a head start, with early disclosure, however the attackers will come out of the blocks quickly to catch up. I expect exploit code to be in the wild well before the majority of patching occurs.