Zero day or 0day is an exploit that has been released or leaked to the public before the vendor has submitted a patch for the vulnerability.

That means that is being used in-the-wild by threat actors.