What is the difference between a Vulnerability and an Exploit?
A vulnerability is a weakness. For software services, a vulnerability may or may not lead to a compromise. An exploit is a successful implementation or attack using a vulnerability. For software services, an exploit will lead to a compromise, it’s just a matter of time before someone takes advantage of that exploit. You may have a vulnerability but no known implementation has been created to leverage that vulnerability against you. Some vulnerabilities are easy to create exploits for while other have no known exploits.
