Zero-day relates to recently discovered vulnerabilities, which the vendor hasn’t spotted or had time to fix yet. These are particularly dangerous because only the attacker knows they exist.