Code or a technique that weaponises a zero-day vulnerability which turns a theoretical flaw into a working attack. Exploits may be developed by security researchers, government agencies, or criminal groups, and can be sold or traded on grey and black markets for significant sums.
A piece of malware that takes advantage of the unpatched browser bug, silently executing code when a user visits a page, is a zero-day exploit.
