captured vulnerability