Definition
A zero-day vulnerability is a hardware, firmware, or software flaw unknown to defenders or lacking an available fix; exploiting it is a zero-day attack.
Usage and related concepts
A vulnerability, an attack, and a patch are different concepts. Finding a flaw does not prove exploitation; a disclosed and patched flaw can still affect devices that have not been updated.