Cybersecurity

CVSS

the standard 0 to 10 severity score for software flaws

The Common Vulnerability Scoring System rates how bad a software flaw is, from 0 to 10. It weighs how easy the flaw is to reach and use, and how much damage it allows. Scores of 9.0 and above are rated critical. It measures severity, not how likely an attack is.

Think of it as

Like a storm warning scale: it tells you how bad the storm could be, not whether it will hit your street.