What is the difference between vulnerability and risk?

A vulnerability is a weakness that can be exploited and the risk is the potential for loss or damage

A vulnerability is an attack surface, and the risk is the vector of the attack

A risk is a possible danger that an exploit applies to and a vulnerability represents the threat actor

Risk is the assessment of possible weaknesses and vulnerability is a reconfiguration of an asset