What is Exploit?

Code or a technique that takes advantage of a vulnerability to cause unintended behavior.

An exploit turns a vulnerability into real impact — code execution, privilege escalation, or data theft. Proof-of-concept (PoC) exploits demonstrate feasibility; weaponized exploits are used in attacks.

When an exploit is seen in real attacks, the CVE may be added to CISA’s KEV catalog.