Flaws or security holes in a program or IT system, and often used by virus as a means of transmission and infection.