

100%,
100%,
Ah thank you. I thought zero day and 1 day vulnerabilities were: 0-day = vulnerability is not known to the vendor and so there is no patch. If exploited, it is a 0-day attack. 1-day = vulnerability is known and patch is available, but not all systems are patched.
I.E. the actual number of days doesn’t matter.
Indeed. The <“I’m right. There’s plenty of sources that back me up, do your own research” then fail to provide sources> crowd are my personal pet peeve.
I did… It looks like the bug has been exploited for a couple of weeks now, with a patch only being released on 20th of July? That makes it zero-day
The bug is regarded as a zero-day because the vendor — Microsoft, in this case — had no time to issue a patch before it was actively exploited.
Edit: realised we might have different definition of zero day. Depends whether you consider that the vendor didn’t know about the issue, or there isn’t a patch available upon exploitation of the vulnerability.
This is a zero-day bug though?
You don’t see it everyday that’s for sure.
Can’t believe this poor reading comprehension is getting upvoted.
RIP climate targets