The unreleased model found thousands of zero-day vulnerabilities in major operating systems and browsers, including a 27-year-old bug in OpenBSD