Exploited in the wild

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote att…CVE-2014-0497Adobe · CVSS 8.8 · 100% likely

   CWE-191Adobe

2. Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involving crafted JavaScript code, CMarkup, and…CVE-2014-0322Microsoft · CVSS 8.8 · 85% likely

   CWE-416MicrosoftAxiom

3. The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet host…CVE-2013-7331Microsoft · CVSS 6.5 · 50% likely

   CWE-209Microsoft

4. Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR…CVE-2014-0502Adobe · CVSS 8.8 · 25% likely

   CWE-415Adobe1 bounty report

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.