An exploitable software vulnerability that hasn’t been disclosed or patched by the software vendor yet.