A vulnerability in a product that is addressed by a Microsoft security update and security bulletin or a service pack.