A hardware, firmware, communication, or software flaw that leaves a computer processing system open for potential exploitation, either externally or internally, thereby resulting in risk for the owner, user, or manager of the system.
Sources:
CNSSI 4009-2022
Detailed description of a weakness to include the implementable steps (such as code) necessary to exploit that weakness.
Sources:
CNSSI 4009-2022