Patch Gap
The time window during which vulnerability details are known to some parties but the official fix patch has not yet been released; defenders lack an official patch during this period and can rely only on temporary mitigations such as virtual patching.
Timeline (last 90 days)
The patch gap refers to the period during which a vulnerability is already known to some parties but the official fix has not yet been released.
Common causes of the patch gap include the time vendors need for internal fixes, vulnerabilities leaking through informal channels, and attackers reverse-engineering vulnerability details through binary diff analysis.
All Facts (2)
The patch gap refers to the period during which a vulnerability is already known to some parties but the official fix has not yet been released.
50%UnverifiedCommon causes of the patch gap include the time vendors need for internal fixes, vulnerabilities leaking through informal channels, and attackers reverse-engineering vulnerability details through binary diff analysis.
50%