A flaw is an implementation error that can result in a vulnerability, and vulnerability is an exploitable defect in your code that enables an attack.