A vulnerability is a security weakness. It can exist in software, a web application, an operating system, a plugin, or configuration. By itself it does not always mean someone was attacked, but it creates a possibility of abuse.
Why it matters: When a vulnerability is known and a fix exists, delaying the update increases risk.
