ITG NowHome › AI glossary › Vulnerability
What is a security vulnerability?
A vulnerability is a flaw in software or hardware that an attacker could use to cause harm.
- Category Safety & law
- Also called security flaw, CVE
- Updated 20 Oct 2026
Vulnerability, explained simply
A vulnerability is a weak spot, like an unlocked window. It is a bug that has security effects.
Researchers and makers look for them. When one is found, the maker releases a fix, called a patch or update.
CVE is a public list that gives each known flaw an ID. The best protection is to install updates quickly.
On ITG Now, our daily AI news stories sometimes cover security flaws found in AI tools and how to update.
Related terms
Zero-dayMalwareSupply chain attackRed teamingPrompt injectionDependency
Where you'll see it on ITG Now
Questions people ask about Vulnerability
What is a CVE?
A CVE is an ID given to a known security flaw. It lets everyone refer to the same problem.
How do I protect myself from vulnerabilities?
Install updates for your system and apps. Remove tools you no longer use.
Vulnerability vs malware: what is the difference?
A vulnerability is a flaw. Malware is harmful software, and it may use a flaw to get in.