Glossary
Patch group
The set of vulnerabilities one patch closes, together with every host it applies to. The unit a maintenance window can actually be booked for.
Also calledgrouping by patch · remediation group
The inversion of a vulnerability list. Instead of one row per vulnerability-and-host pair, one row per patch — carrying the flaws it closes and the hosts it applies to.
This is not a convenience re-sort. A patch is the thing that gets installed, that needs a reboot, that has a window and an owner who must approve it. A vulnerability is none of those.