Security vulnerability: definition, types and prevention

5 min Updated: 2026-08-03

Summary

A security vulnerability (or flaw) is a weakness in an information system — software, configuration, hardware or human process — that an attacker can exploit to access data, disrupt a service or take control of the system. Fixing it means applying patches, hardening configuration and reducing the exposed attack surface.

What is a security vulnerability?
The main types of vulnerabilities
How to detect and fix a vulnerability
5 - FAQ

What is a security vulnerability?

A security vulnerability is an exploitable flaw in an information system. It can live in software code, in an overly permissive configuration, in a hardware component or in a human process. Until it is fixed, it gives an attacker a way to bypass existing protections.

The main types of vulnerabilities

Vulnerabilities fall into several broad families:

Software flaws: SQL injection, cross-site scripting (XSS), buffer overflow, insecure deserialization.
Misconfigurations: services exposed to the Internet, excessive permissions, default passwords, missing encryption.
Known unpatched vulnerabilities: published flaws (CVEs) whose fix has not been applied.
Human weaknesses: phishing, social engineering, poor access management.
Zero-day flaws: still unknown to the vendor, so with no patch available.

How to detect and fix a vulnerability

Detection combines several approaches: vulnerability scanning, penetration testing, CVE monitoring and continuous supervision. Remediation relies on simple but rigorous measures.

Apply security updates (vendor patches) without delay.
Enforce least privilege and segment the network.
Monitor critical services (health probe, logs, alerts).
Back up regularly and test restoration.
Prepare an incident response plan.

5 - FAQ

What is the difference between a flaw and a vulnerability? In cybersecurity the two terms are synonyms: both mean an exploitable weakness. “Vulnerabi… Expand Retract

In cybersecurity the two terms are synonyms: both mean an exploitable weakness. “Vulnerability” is the technical term, “flaw” its everyday equivalent.

What is a zero-day vulnerability? It is a flaw still unknown to the software vendor, for which no patch exists. It is especi… Expand Retract

It is a flaw still unknown to the software vendor, for which no patch exists. It is especially dangerous because classic defenses do not yet recognize it.

How do I know if my company has vulnerabilities? Regular security audits and vulnerability scans reveal weak points. A penetration test goe… Expand Retract

Regular security audits and vulnerability scans reveal weak points. A penetration test goes further by simulating a real attack.

Are all vulnerabilities critical? No. Criticality depends on how easily a flaw can be exploited and its potential impact, of… Expand Retract

No. Criticality depends on how easily a flaw can be exploited and its potential impact, often measured by the CVSS score (0 to 10). Prioritize the most severe and most exposed flaws.