A weakness in software or settings that an attacker could use to get in.
Like an unlocked window on the second floor: it only matters if someone finds it, and the fix is quick once you know.
Patch Management closes known vulnerabilities by keeping software current. A vCIO review covers the settings side.
Does every vulnerability matter? No. Priority goes to ones attackers are already using and ones that expose your key systems.
Every WILDCARD card exists to solve one named problem. Find yours.