Software bug that can be exploited to gain unauthorized access or privileges on a computer system.
Security weakness which allows an attacker to reduce a system's information assurance.