Exploited in the wild

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows r…CVE-2012-0507Oracle · CVSS 9.8 · 98% likely

   CWE-843Oracle

2. Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37…CVE-2012-1723Oracle · CVSS 9.8 · 94% likely

   CWE-284Oracle

3. Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (m…CVE-2012-1889Microsoft · CVSS 8.8 · 84% likely

   CWE-787MicrosoftAxiom

4. Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android…CVE-2012-2034Adobe · CVSS 7.5 · 7.7% likely

   CWE-119Adobe

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.