unpatched actively exploited vulnerability
as defined in Commission Delegated Regulation (EU) 2024/1366 of 11 March 2024 supplementing…, Article 3, point (47) (Definitions)
a vulnerability, which has not yet been publicly disclosed and patched and for which there is reliable evidence that execution of malicious code was performed by an actor on a system without permission of the system owner