A security vulnerability for which no fix or patch is available. Developers of the affected program have zero days to produce a patch before malicious exploitation of the bug can occur. The term could also be used to refer to a zero-day virus, which is a piece of malware that currently cannot be removed by security software.