A vulnerability that is exploited by attackers before the vendor has released a fix — meaning defenders have had zero days to prepare.
Zero-days are especially dangerous because standard patching defenses don't yet exist, making detection and response capability critical when signature-based prevention can't help.
