What is an exploit in cyber security?
In this glossary, an exploit is a method used to take advantage of a weakness in a computer system. It can be used to get in, run unwanted code, or cause some other unwanted result. This is Secordit's plain description of the term. This page does not describe how to write, buy, test or use an exploit.
By Secordit. Last checked: 10 November 2026.
How it works
- In this glossary, the word is used as a noun: the method that takes advantage of a weakness.
- A vulnerability is the weakness itself. The vulnerability and zero-day glossary pages cover those terms in more detail.
- Once a weakness is widely known, ready-made attacks can follow, which is why software updates matter. This page does not describe those methods. 1
What UK guidance says
NCSC vulnerability guidance talks about a weakness that can be exploited by an attacker. It uses exploit as a verb there, rather than defining the noun. The practical point in NCSC update guidance is to install updates, know what you run, and not ignore prompts. 12
Frequently asked questions
What is an exploit, in plain English?
In this glossary, it is a method used to take advantage of a weakness in a computer system.
Is an exploit the same as a vulnerability?
No. A vulnerability is the weakness. An exploit is a method used to take advantage of that weakness. See the vulnerability glossary page for the NCSC description of a weakness. 1
Does this page explain how an exploit is used?
No. This page explains the term only. It does not describe how to write, buy, test or use an exploit.
News Pulse
Account security, explained by email.
Sources
- NCSC, Understanding vulnerabilities (opens in a new tab). Accessed 10 November 2026 (Europe/London).
- NCSC, Vulnerability management (opens in a new tab). Accessed 10 November 2026 (Europe/London).