Exploited in the wild

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted ap…CVE-2012-4681Oracle · CVSS 9.8 · 99% likely

   CWE-284Oracle

2. The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Ser…CVE-2012-1856Microsoft · CVSS 8.8 · 72% likely

   MicrosoftPatchwork

3. Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or c…CVE-2012-1535Adobe · CVSS 7.8 · 70% likely

   CWE-94Adobe

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.