A software vulnerability that is exploited by attackers before a fix is available.