A zero-day is a vulnerability that is found and already being exploited by malicious actors before any fix is available, giving potential victims no time at all (zero days) in which to protect themselves. Also known as an 0-Day (pronounced "oh-day").