During a threat hunt following the disclosure of a critical CVE in a widely deployed PDF reader, you must produce a list of every managed device in your organization that currently has the specific vulnerable software version installed so the vulnerability management team can prioritize patching. You want to use Advanced Hunting in the Microsoft Defender portal. Which table should you query to directly map each affected device to the vulnerable software and CVE?