[limagnolia]

I though zero-day meant actively being exploited in the wild before a patch is available?

[rcxdude]

Zero day means that there is zero days between a patch being available and the vulnerability being disclosed (as opposed to the patch being available before disclosure).

[Dylan16807]

Discovering a zero day implies that there is no patch, but the term is talking about how long the vendor has known about the vulnerability.