This describes a threat or vulnerability that is unknown to developers and has not been addressed. It is considered a serious problem in many cases.