Zero-Day Vulnerability

Term: Zero-Day Vulnerability / Zero-Day Exploit

Definition: A vulnerability that is unknown to the vendor (or has no patch yet), and an exploit that uses it before it’s fixed—on “day zero” of public awareness.

Context/Example: A zero-day exploit in the OS or in a Network Application is a risk even on a fully updated machine.

Related Concepts: Exploit, patching