A zero-day is a vulnerability that is discovered (and very often exploited) before any fix is available, giving potential victims no time at all (zero days) in which to protect themselves. Also known as an 0-Day (pronounced "oh-day").