Is it illegal to create and sell a exploit of a zero-day vulnerability?
<p>The definition of an exploit:</p>

<blockquote>
  <p>A software tool designed to take advantage of a flaw in a computer system, typically for malicious purposes such as installing malware.</p>
</blockquote>

<p>The definition of a zero-day vulnerability:</p>

<blockquote>
  <p>A zero-day (also known as zero-hour or 0-day) vulnerability is an undisclosed computer-software vulnerability that hackers can exploit to adversely affect computer programs, data, additional computers or a network.</p>
</blockquote>

<p>Is it illegal to create and sell a exploit of a zero-day vulnerability?</p>

<p>Yes.</p>

<p>In the United Kingdom it is illegal under the Computer Misuse Act 1990.</p>

<p>In other jurisdictions there may not be a law directly aimed at computer crime but if you sell it knowing that a crime is going to be committed with it that makes you an accomplice.
Most computer crime is prosecuted under laws not directly aimed at computer misuse.</p>

internet hacking computer-misuse-act ethical-hacking