Exploit status is a security signal that describes how far a vulnerability has moved from theory to real-world abuse. A flaw may be publicly known, weaponized into a working exploit, or confirmed as actively used in attacks. This is different from severity: a critical bug can still be lower priority than a less severe issue that is already being exploited.
For defenders, exploit status is one of the fastest ways to triage patching. If a vulnerability is marked as actively exploited, it usually moves to the top of the queue because attackers are likely to target exposed systems immediately. Security teams use this signal to decide where to apply emergency patches, temporary mitigations, tighter access controls, and heightened monitoring. Vendors and threat-intelligence sources often publish exploit-status indicators so organizations can separate theoretical risk from active operational danger.