Run vulnerability management — discovery, prioritization, remediation, and verification — so known weaknesses are fixed before exploitation. Use when operating scanning programs, patch processes, or reducing exposure from known CVEs and misconfigurations.