Exploited in the wild

Every one of the 2 is a mark on the map. Named now: 1 to 2, most at risk first.

1. Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications…CVE-2011-3544Oracle · CVSS 9.8 · 97% likely

   CWE-284Oracle

2. afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows loc…CVE-2011-2005Microsoft · CVSS 7.8 · 32% likely

   MicrosoftFIN6

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.