Exploited CVEs of 2011

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLi…CVE-2011-0611Adobe · CVSS 8.8 · 99% likely

   CWE-843AdobeAPT12Berserk Bear

2. Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications…CVE-2011-3544Oracle · CVSS 9.8 · 97% likely

   CWE-284Oracle

3. Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows remote at…CVE-2011-2462Adobe · CVSS 8.8 · 89% likely

   CWE-787Adobe

4. Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista…CVE-2011-3402Microsoft · CVSS 8.8 · 78% likely

   Microsoft

5. Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier;…CVE-2011-0609Adobe · CVSS 7.8 · 64% likely

   AdobeAPT12

6. The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving…CVE-2011-1889Microsoft · CVSS 9.8 · 49% likely

   CWE-119Microsoft

7. The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code a…CVE-2011-1823Android · CVSS 7.8 · 41% likely

   CWE-190Android

8. afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows loc…CVE-2011-2005Microsoft · CVSS 7.8 · 32% likely

   MicrosoftFIN6

9. The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.CVE-2011-4723D-Link · CVSS 5.7 · 3.1% likely

   CWE-312D-Link

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.