Hi,
Based on my understanding, we need to find the only one client at risk. Left click the red circle item.
\Assets and Compliance\Overview\Devices\All Desktop and Server Clients: Active clients at risk
If you move mouse over the Active Client at risk: ?, it will prompt information: We could solve the problem according to these aspects
Endpoint Protection clients with malware pending remediation, known operational issues, without antivirus definitions, or antivirus definitions older than 7 days.