Exploited in the wild

Every one of the 22 is a mark on the map. Named now: 1 to 22, most at risk first.

1. Microsoft Exchange Server SSRF VulnerabilityCVE-2021-26855Microsoft · CVSS 9.1 · 100% likely

   CWE-918MicrosoftAPT35APT412 bounty reports

2. F5 iControl REST - Remote Command ExecutionCVE-2021-22986F5 · CVSS 9.8 · 100% likely

   CWE-918F5

3. Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-27065Microsoft · CVSS 7.8 · 100% likely

   CWE-22MicrosoftAPT35Threat Group-3390

4. Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-26857Microsoft · CVSS 7.8 · 96% likely

   CWE-502MicrosoftAPT35Threat Group-3390

5. Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-26858Microsoft · CVSS 7.8 · 94% likely

   MicrosoftAPT35Threat Group-3390

6. Internet Explorer Memory Corruption VulnerabilityCVE-2021-26411Microsoft · CVSS 8.8 · 82% likely

   CWE-416MicrosoftAPT37

7. vRealize Operations Manager API - Server-Side Request ForgeryCVE-2021-21975VMware · CVSS 9.8 · 78% likely

   CWE-918VMware

8. Veritas Backup Exec - Broken AuthenticationCVE-2021-27877Veritas · CVSS 8.2 · 65% likely

   Veritas

9. Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell…CVE-2021-22681Rockwell · CVSS 9.8 · 64% likelycovered by CyberSIXT

   CWE-522Rockwell

10. On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3, undisclosed requests to a virtual serv…CVE-2021-22991F5 · CVSS 9.8 · 62% likely

    CWE-119F5

11. Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. The vulnerability could cause in…CVE-2021-22506Micro Focus · CVSS 7.5 · 26% likely

    Micro Focus

12. Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.CVE-2021-21166Google · CVSS 8.8 · 24% likely

    CWE-362Google

13. An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires successful authentication, which is typically completed over a…CVE-2021-27878Veritas · CVSS 8.8 · 24% likely

    Veritas

14. An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires successful authentication, which is typically completed over a…CVE-2021-27876Veritas · CVSS 8.1 · 14% likely

    Veritas

15. Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.CVE-2021-21193Google · CVSS 8.8 · 10.0% likely

    CWE-416Google

16. Microsoft Office Remote Code Execution VulnerabilityCVE-2021-27059Microsoft · CVSS 7.6 · 6.1% likely

    Microsoft

17. Internet Explorer Remote Code Execution VulnerabilityCVE-2021-27085Microsoft · CVSS 8.8 · 5.4% likely

    Microsoft

18. Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files.CVE-2021-25337Samsung Mobile · CVSS 4.4 · 2.8% likely

    CWE-269Samsung

19. An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.CVE-2021-25369Samsung Mobile · CVSS 6.2 · 1.1% likely

    CWE-200Samsung

20. An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic.CVE-2021-25370Samsung Mobile · CVSS 6.1 · 0.9% likely

    CWE-703Samsung

21. An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.CVE-2021-25372Samsung Mobile · CVSS 6.1 · 0.8% likely

    CWE-703Samsung

22. A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.CVE-2021-25371Samsung Mobile · CVSS 6.1 · 0.8% likely

    CWE-912Samsung

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.