A zero-day vulnerability is a software flaw that has not yet been discovered or patched. A zero-day exploit is an attack or code that uses this vulnerability to gain unauthorized access or cause harm before a fix is available.