2 ms·

I assume it is 0day irrespective of who discovered it. It remains 0day until an action is taken to mitigate it. So you have 0day exploits being traded on variou

I assume it is 0day irrespective of who discovered it. It remains 0day until an action is taken to mitigate it. So you have 0day exploits being traded on various markets - those are exploits which are known to certain groups, but the affected party hasn't yet taken action to mitigate them (most likely because they don't know).

busterarm 8y ago
That's correct.
feanaro 8y ago
That's slightly inconsistent with the OP's interpretation because the vulnerability would be traded so it could be exploited (presumably), but by the OP's definition that would make it no longer be a 0day.