An attack vector is a specific method or technique used to exploit a vulnerability. A vulnerability is a weakness in a system or application that a malicious actor exploit.