Exploited in the wild

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. ShellShock - Remote Code ExecutionCVE-2014-6271GNU · CVSS 9.8 · 100% likely

   CWE-78GNU1 bounty report

2. GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to wr…CVE-2014-7169GNU · CVSS 9.8 · 100% likely

   CWE-78GNU

3. GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary commands vi…CVE-2014-6278GNU · CVSS 8.8 · 100% likelycovered by CyberSIXT

   CWE-78GNU1 article

4. Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that pr…CVE-2014-4404Apple · CVSS 7.8 · 49% likely

   CWE-787Apple

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.