A zero-day vulnerability is a security flaw that is unknown to the software vendor and has no available patch. Attackers can exploit zero-day vulnerabilities before defenses are developed. They represent a significant security risk. Example: A newly discovered browser vulnerability exploited before an update is released.