In information security, what is a vulnerability?

A flaw in hardware or software that can be exploited

The possibility of suffering a loss in the event of an attack

A piece of malware that records each keypress by the user and gathers confidential information

A program that entices users to download it$,$ then installs malware on their systems