vulnerability expands