What are the two differences between vulnerability and exploit?

Known vulnerabilities are assigned special CVE numbers, and exploits are using process to take advantage of vulnerabilities.

Vulnerabilities can be found in hardware and software, and exploits can be used only for software-based vulnerabilities.

Zero-day exploit can be used to take advantage of a vulnerability until the vulnerable software or hardware is patched.

Vulnerabilities are usually populated in the dark web, and exploit tools and methods can be found in the public web.

Zero-day exploit can be used for taking advantage of a known vulnerability, and cyber-attack can be performed on company assets.