Likely to be exploited (10% or more)

Every one of the 63 is a mark on the map. Named now: 1 to 26, most at risk first.

1. The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client…CVE-2016-0800Openssl · 82% likely

   CWE-200OpenSSL2 bounty reports

2. ISC DHCP 4.1.x before 4.1-ESV-R13 and 4.2.x and 4.3.x before 4.3.4 does not restrict the number of concurrent TCP sessions, which allows remote attackers to cause a denial of serv…CVE-2016-2774Isc · 74% likely

   CWE-20Isc

3. The PDF library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a cra…CVE-2016-0117Microsoft · 72% likely

   CWE-20Microsoft

4. named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature…CVE-2016-1286Isc · 61% likely

   Isc

5. named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause…CVE-2016-1285Isc · 58% likely

   Isc

6. OLE in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 a…CVE-2016-0092Microsoft · 57% likely

   CWE-20Microsoft

7. Microsoft Windows Vista SP2 and Server 2008 SP2 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Library Loading Input Valida…CVE-2016-0100Microsoft · 57% likely

   CWE-20Microsoft

8. The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memory allocation succeeds, which allows rem…CVE-2016-2842Openssl · 54% likely

   CWE-119OpenSSL

9. Stack-based buffer overflow in dwrcs.exe in the dwmrcs daemon in SolarWinds DameWare Mini Remote Control 12.0 allows remote attackers to execute arbitrary code via a crafted strin…CVE-2016-2345Dameware · 51% likely

   CWE-119

10. The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5) through 1.13.4 and 1.14.x through 1.1…CVE-2016-3119Mit · 40% likely

    Mit

11. Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web sit…CVE-2016-0111Microsoft · 39% likely

    CWE-119Microsoft

12. Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Me…CVE-2016-0108Microsoft · 39% likely

    CWE-119Microsoft

13. The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and…CVE-2016-0121Microsoft · 39% likely

    CWE-20Microsoft

14. The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and…CVE-2016-0120Microsoft · 37% likely

    CWE-20Microsoft

15. Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to cause a denial of service (memory corruption a…CVE-2016-3141Php · 36% likely

    CWE-119PHP

16. Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11…CVE-2016-3115Openbsd · CVSS 6.4 · 36% likely

    CWE-93Openbsd

17. The PDF library in Microsoft Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted PDF document, aka "Windows Remote Code Execution Vulnerabilit…CVE-2016-0118Microsoft · 33% likely

    CWE-20Microsoft

18. The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths, which allows remote attackers to cause a d…CVE-2016-0799Openssl · 32% likely

    CWE-119OpenSSL1 bounty report

19. Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arb…CVE-2016-1960Mozilla · 31% likely

    Mozilla

20. Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before…CVE-2016-1000Adobe · 29% likely

    CWE-416Adobe

21. Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before…CVE-2016-0999Adobe · 29% likely

    CWE-416Adobe

22. Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before…CVE-2016-0997Adobe · 29% likely

    CWE-416Adobe

23. Use-after-free vulnerability in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before…CVE-2016-0998Adobe · 28% likely

    CWE-416Adobe

24. Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service (heap memory corruption or NULL pointer deref…CVE-2016-0797Openssl · 27% likely

    OpenSSL1 bounty report

25. Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denia…CVE-2016-0705Openssl · 26% likely

    OpenSSL

26. Heap-based buffer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 2…CVE-2016-1001Adobe · 25% likely

    CWE-787Adobe

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.