An N-day exploit targets a vulnerability after the vendor has released a fix, but before every system has installed it. The bug is no longer secret: the patch, advisory, or code changes can reveal enough detail for attackers to understand what to abuse. The “N” simply means the exploit happens on a known, public flaw during the patch gap.
This matters because real-world defenders rarely patch everything instantly. Delayed updates, compatibility testing, offline devices, and unmanaged endpoints create a window where known bugs remain usable. Attackers often scan for unpatched browsers, servers, and endpoints soon after fixes appear, then use the disclosed weakness for intrusion, privilege escalation, or malware delivery. Defenders reduce N-day risk with fast patching, asset inventory, automatic updates, and monitoring for systems that missed the rollout.