Zero-day attack
nouncandidate·updated May 9, 2026
An attack on a piece of software that has a vulnerability for which there is no known patch.
Framework senses
- §1
- A zero-day (or zero-hour or day zero) attack or threat is a computer threat that tries to exploit computer application vulnerabilities that are unknown to others or undisclosed to the software developer. Zero-day exploits (actual code that can use a security hole to carry out an attack) are used or shared by attackers before the software developer knows about the vulnerability.
Federal Financial Institutions Examination Council (FFIEC) IT Examination Handbook Infobase, Glossary1 senseview framework →
- §1
- An attack on a piece of software that has a vulnerability for which there is no known patch.