Likely to be exploited (10% or more)

Every one of the 67 is a mark on the map. Named now: 1 to 26, most at risk first.

1. The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which ma…CVE-2016-2183Python · CVSS 7.5 · 95% likely

   CWE-200Python7 bounty reports

2. buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause…CVE-2016-2776Isc · 89% likely

   CWE-20Isc

3. Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Mi…CVE-2016-3247Microsoft · 71% likely

   Microsoft

4. statem/statem.c in OpenSSL 1.1.0a does not consider memory-block movement after a realloc call, which allows remote attackers to cause a denial of service (use-after-free) or poss…CVE-2016-6309Openssl · 70% likely

   CWE-416OpenSSL

5. The Office Open XML (OOXML) feature in Adobe ColdFusion 10 before Update 21 and 11 before Update 10 allows remote attackers to read arbitrary files or send TCP requests to intrane…CVE-2016-4264Adobe · 69% likely

   CWE-611Adobe

6. Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5…CVE-2016-6662Oracle · 68% likely

   CWE-264Oracle

7. Multiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before 1.1.0a allow remote attackers to cause a denial of service (memory consumption) v…CVE-2016-6304Openssl · 63% likely

   CWE-401OpenSSL1 bounty report

8. PowerDNS (aka pdns) Authoritative Server before 3.4.10 does not properly handle a . (dot) inside labels, which allows remote attackers to cause a denial of service (backend CPU co…CVE-2016-5427Powerdns · 63% likely

   CWE-399PowerDNS

9. Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word for Mac 2011, Word 2016 for Mac, Word Viewer, Word Automation Services on ShareP…CVE-2016-3357Microsoft · 55% likely

   CWE-119Microsoft

10. Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vuln…CVE-2016-3325Microsoft · 54% likely

    CWE-200Microsoft

11. The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out…CVE-2016-2182Openssl · 44% likely

    CWE-787OpenSSL1 bounty report

12. The certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote attackers to cause a denial of service (out-of-bounds read) via crafted certificate oper…CVE-2016-6306Openssl · 42% likely

    CWE-125OpenSSL1 bounty report

13. The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold…CVE-2016-3371Microsoft · 40% likely

    CWE-200Microsoft

14. The SMBv1 server in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Go…CVE-2016-3345Microsoft · 32% likely

    CWE-284Microsoft

15. Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and applic…CVE-2016-6303Openssl · 32% likely

    CWE-787OpenSSL1 bounty report

16. PowerDNS (aka pdns) Authoritative Server before 3.4.10 allows remote attackers to cause a denial of service (backend CPU consumption) via a long qname.CVE-2016-5426Powerdns · 31% likely

    CWE-399PowerDNS

17. crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a CRL operation.CVE-2016-7052Openssl · 29% likely

    CWE-476OpenSSL

18. The Microsoft Azure Active Directory Passport (aka Passport-Azure-AD) library 1.x before 1.4.6 and 2.x before 2.0.1 for Node.js does not recognize the validateIssuer setting, whic…CVE-2016-7191Microsoft · 29% likely

    CWE-287Microsoft

19. Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet E…CVE-2016-3324Microsoft · 28% likely

    Microsoft

20. The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to ca…CVE-2016-6302Openssl · 28% likely

    CWE-20OpenSSL1 bounty report

21. The DTLS implementation in OpenSSL before 1.1.0 does not properly restrict the lifetime of queue entries associated with unused out-of-order messages, which allows remote attacker…CVE-2016-2179Openssl · 27% likely

    CWE-399OpenSSL

22. The PDF library in Microsoft Edge, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive in…CVE-2016-3374Microsoft · 26% likely

    CWE-200Microsoft

23. Integer overflow in the get_data function in zipimport.c in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 allows remote attackers to have unspecifie…CVE-2016-5636Python · 25% likely

    CWE-190Python

24. The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows rem…CVE-2016-2181Openssl · 23% likely

    CWE-189OpenSSL

25. Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web sit…CVE-2016-3297Microsoft · 23% likely

    Microsoft

26. The PDF library in Microsoft Edge, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive in…CVE-2016-3370Microsoft · 22% likely

    CWE-200Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.