A vulnerability exploited before a fix is available.
A vulnerability discovered and exploited by attackers before the developer becomes aware of and addresses it. Because no fix exists yet, the damage tends to be greater. The stretch of time before a patch is released, when nothing can be fixed directly, is called the window, and mitigations like IPS/IDS anomaly detection matter most during it.
© 2026 ITBGM