Exploit
Exploit
Ausnutzungscode für eine Schwachstelle
An exploit is code or a technique that specifically uses a concrete vulnerability to force unintended behaviour — such as executing code or escalating privileges. It is the tool that turns a theoretical flaw into a practical attack. A „zero-day exploit“ uses a still unknown, unpatched vulnerability.
History & facts. Between a vulnerability (CWE class, concretely recorded as a CVE) and actual damage stands the exploit: only it makes the flaw usable. A distinction is made between publicly available proof-of-concepts, exploits integrated into attack tools, and especially valuable zero-days against unknown flaws. The probability that exploitation exists for a vulnerability is estimated by EPSS; whether it is actually exploited is shown by the KEV catalogue.
Outlook & recommendation. For defenders, the central quantity is the time window between a flaw becoming known and an available exploit — it tends to get shorter. Prioritisation should therefore follow not severity alone (CVSS) but above all exploitability: what is already being exploited (KEV) or has a high exploitation probability (EPSS) belongs fixed first. Against zero-days, defence in depth and behaviour detection help, since no patch exists.