A vulnerability, is a weakness in software or hardware code. This weakness can be exploited by threat actors. Weaknesses, known or unknown, exist in all code. The typical dynamic is the effort to find (make known) a vulnerability and fix them before the vulnerability can be exploited.