“There is 0-day out there currently being used in targeted attacks. The number of these attacks has been relatively low, but it is likely to increase due to the fact that this is a fast and reliable exploit that can be used in drive-by attacks and all kinds of links in emails.”
Source: DeepEnd Research: Java 7 0-Day vulnerability information and mitigation.