A weakness in a computer system or network that could be exploited by an attacker. Vulnerabilities can be found in software, hardware, and configuration settings.