First, a 0-day vulnerability is a security flaw that's unknown to the software vendor and has no patch available at the time of discovery. These are highly valuable and dangerous because they can be exploited before the developers can fix them. The term "0-day" refers to the number of days the vendor has had to address the issue—zero days in this case.