A CVSS score is a numerical rating that estimates how severe a vulnerability is. It is based on factors such as how easy the flaw is to exploit, what access an attacker needs, and the possible impact on confidentiality, integrity, and availability. Scores usually range from 0.0 to 10.0, with higher values indicating greater severity.
In cyber security, CVSS helps teams compare vulnerabilities and prioritize patching, especially when many issues compete for attention. A high score does not prove active exploitation, but it often signals that a flaw could be dangerous if exposed to attackers. In practice, defenders use CVSS alongside context such as internet exposure, asset value, and evidence of real-world abuse. For example, a critical issue rated 9.8 on a management or commerce system may demand immediate remediation because compromise could lead to account takeover or code execution.