home/dictionary/Zero-day attack

Zero-day attack

nouncandidate·updated May 9, 2026

An attack on a piece of software that has a vulnerability for which there is no known patch.

Framework senses

SANS Glossary of Security Terms1 senseview framework →
§1
A zero-day (or zero-hour or day zero) attack or threat is a computer threat that tries to exploit computer application vulnerabilities that are unknown to others or undisclosed to the software developer. Zero-day exploits (actual code that can use a security hole to carry out an attack) are used or shared by attackers before the software developer knows about the vulnerability.
Federal Financial Institutions Examination Council (FFIEC) IT Examination Handbook Infobase, Glossary1 senseview framework →
§1
An attack on a piece of software that has a vulnerability for which there is no known patch.