A software security flaw that is known to the software vendor but doesn't have a patch in place to fix the flaw.
Zero-day vulnerabilities pose a higher risk to users for the following reasons:
1. Cybercriminals race to exploit these vulnerabilities to cash in on their schemes; and
2. Vulnerable systems are exposed until a patch is issued by the vendor.