A zero-day vulnerability is a novel security flaw in software or hardware that is unknown to the vendor and has no available patch or fix.