2.2 KiB
Dashboard vulnerability exposure
Fleet's dashboard includes a "Vulnerability exposure" chart that shows how many hosts have critical CVEs in a curated set of widely deployed software.
For the full list of software Fleet detects vulnerabilities on, see Vulnerability processing.
What's included in the chart
| Category | Software |
|---|---|
| Browsers | Google Chrome, Mozilla Firefox, Brave, Safari, Opera |
| Microsoft Office | Word, Excel, PowerPoint, Outlook, and standalone Office installs |
| Adobe | Acrobat, Flash, Shockwave Flash |
| Linux kernel | linux-image and linux-signed-image packages on Debian and Ubuntu; kernel-* packages on RHEL, Fedora, and Amazon Linux |
Patterns cover packaging variants, so Chrome Beta and Canary, Firefox ESR and Nightly, and kernel metapackages are picked up without extra configuration.
Why not every software item
Two things shape what the chart counts.
Reach and risk. The chart is meant to be a single, quick read on the worst exposure across your fleet. Browsers, Office, and the Linux kernel are the software where critical CVEs most often turn into real exploits, and they are the software most hosts run. Adobe is included for the same reason. PDF and document handlers remain a common foothold.
Performance. Each tracked CVE is stored as a per-host bitmap to keep dashboard rendering fast on large deployments. Expanding the list past the curated set is not free in storage or query time. Bitmap compression and per-user filtering are on the roadmap (see issue #44746).
For everything else (Python, Homebrew, npm, Chocolatey, browser extensions, IDE extensions, full OS packages, and more), open Software > Vulnerabilities or filter the host list by CVE.