thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Commonly confused · Security Fundamentals & Crypto

Zero-Day vs Known Vulnerability: What's the Difference?

A zero-day is a flaw unknown to the vendor or without an available patch, so defenders have had zero days to fix it. A known (n-day) vulnerability has been publicly disclosed, usually with a CVE and a patch, but remains exploitable on systems that are not updated.

Zero-Day Vulnerability

Full definition
vs

Known (N-Day) Vulnerability

Zero-Day VulnerabilityKnown (N-Day) Vulnerability
Vendor awarenessUnknown or no fix releasedDisclosed and usually patched
CVE assignedNot yet, in most casesYes
Signature detectionIneffectiveEffective
Best defenseBehavior-based detection, EDR, least privilege, segmentationPatch management and vulnerability scanning
Who uses themAdvanced, well-funded actorsEveryone, including commodity attackers
Remember it

Zero-day: no patch exists. N-day: the patch exists but you have not applied it.

Exam tip

Exams often ask what control helps against a zero-day: choose anomaly or behavior-based detection, not signature antivirus. Most real breaches use known vulnerabilities.

Tested on

More Security Fundamentals & Crypto look-alikes