What term describes an exploit that is discovered or used before the software maker knows about it and before a patch is available?

What term describes an exploit that is discovered or used before the software maker knows about it and before a patch is available?

• A. Zero Day
• B. Known Exploit
• C. Public Exploit
• D. Patched Exploit

Answer: (A)

A zero-day exploit is when a vulnerability is found and exploited before the software maker even knows about it, and before a patch or fix exists. The name comes from the fact there are zero days for the vendor to fix the issue once it’s discovered by attackers, since no patch is available yet. This makes zero-day exploits especially dangerous because defenders have no official patch or guidance to rely on, and protections must come from workarounds, rapid patch development, or monitoring to detect unusual behavior. Think of it as the scenario where the flaw is unknown to the developer and to the public, so the window to respond with a fix hasn’t opened yet. Once the vendor becomes aware, they typically issue an advisory and work on a patch, and once a patch is released, the exploit becomes a "known" or "public" issue unless mitigations are in place. The other terms describe situations where the vulnerability is already known or already patched, which is not what this item describes.

A zero-day exploit is when a vulnerability is found and exploited before the software maker even knows about it, and before a patch or fix exists. The name comes from the fact there are zero days for the vendor to fix the issue once it’s discovered by attackers, since no patch is available yet. This makes zero-day exploits especially dangerous because defenders have no official patch or guidance to rely on, and protections must come from workarounds, rapid patch development, or monitoring to detect unusual behavior.

Think of it as the scenario where the flaw is unknown to the developer and to the public, so the window to respond with a fix hasn’t opened yet. Once the vendor becomes aware, they typically issue an advisory and work on a patch, and once a patch is released, the exploit becomes a "known" or "public" issue unless mitigations are in place. The other terms describe situations where the vulnerability is already known or already patched, which is not what this item describes.