Zero-Day Vulnerability
Definition
A zero-day vulnerability becomes known or exploited before an effective fix is available to those affected.
A vulnerability for which those affected had no effective fix available at the time of exploitation or disclosure.
Simply explained
A security flaw already exists, but there is no effective fix available yet for those affected.
Why it matters in practice
The term contributes to secure, maintainable, and high-performance web applications as well as resilient technical decisions.
Example from business
A company segments critical systems and uses emergency measures until a vendor patch is available.
Limits and pitfalls
- New, unknown, and actively exploited are different characteristics; the term does not indicate severity.
Origin & history
The term originated in security research and the exploit scene for unknown or unpatched vulnerabilities.
Use in mid-sized companies
- Possible application: A company segments critical systems and uses emergency measures until a vendor patch is available.
Frequently asked questions
What does zero-day vulnerability mean?
A vulnerability for which those affected had no effective fix available at the time of exploitation or disclosure. What should you watch out for? New, unknown, and actively exploited are different characteristics; the term does not indicate severity.
Sources
- zero day attack · NIST Glossary, zero day attack
Source checked on 10.10.2026. Editorial use cases are hypothetical; no evidence of real customer results.
Editorially reviewed on: