CVSS 4.0 is the latest version of the Common Vulnerability Scoring System, a standard for rating how severe a security vulnerability is. It turns technical details such as attack complexity, required privileges, user interaction, and expected impact into a score and severity label that teams can compare across products.
In cyber security, CVSS 4.0 helps defenders prioritize patching, decide which systems need immediate isolation, and communicate risk in a consistent way. In real attacks, a higher score often indicates that exploitation is easier or the damage could be greater, such as remote code execution or compromise of an admin session. The score is useful for triage, but it should not replace context: exposed systems, business criticality, and active exploitation can make a “medium” issue urgent and a “critical” one less practical.