Exploited in the wild

Every one of the 19 is a mark on the map. Named now: 1 to 19, most at risk first.

1. VMware vSphere Client (HTML5) - Remote Code ExecutionCVE-2021-21985VMware · CVSS 9.8 · 100% likely

   CWE-470VMware

2. Cisco HyperFlex HX Data Platform - Remote Command ExecutionCVE-2021-1498Cisco · CVSS 9.8 · 100% likely

   CWE-78Cisco

3. Cisco HyperFlex HX Data Platform - Remote Command ExecutionCVE-2021-1497Cisco · CVSS 9.8 · 100% likely

   CWE-78Cisco

4. HTTP Protocol Stack Remote Code Execution VulnerabilityCVE-2021-31166Microsoft · CVSS 9.8 · 100% likely

   CWE-416Microsoft

5. Microsoft Exchange Server Security Feature Bypass VulnerabilityCVE-2021-31207Microsoft · CVSS 6.6 · 100% likely

   CWE-434MicrosoftAPT35FIN7

6. ASUS GT-AC2900 - Authentication BypassCVE-2021-32030ASUS · CVSS 9.8 · 99% likely

   CWE-287ASUS

7. Tenda Router AC11 - Remote Command InjectionCVE-2021-31755Tenda · CVSS 9.8 · 87% likely

   CWE-787Tenda

8. Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local au…CVE-2021-21551Dell · CVSS 8.8 · 80% likely

   CWE-782Dell

9. QNAP HBS 3 - Broken Access ControlCVE-2021-28799QNAP Systems Inc. · CVSS 10 · 78% likely

   CWE-285QNAP

10. A buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to execute arbitrary code as the root user via maliciously cr…CVE-2021-22894Ivanti · CVSS 8.8 · 41% likely

    CWE-94Ivanti

11. Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote attacker to execute arbitrary code. This issue affects: Chec…CVE-2021-27852Checkbox · CVSS 9.8 · 30% likely

    CWE-502Checkbox

12. A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code execution via Windows Resource Profi…CVE-2021-22899Ivanti · CVSS 8.8 · 23% likely

    CWE-77Ivanti

13. A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to perform a file write via a malic…CVE-2021-22900Ivanti · CVSS 7.2 · 14% likely

    CWE-94Ivanti

14. The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a use-after-free. This affects Bifros…CVE-2021-28663Arm · CVSS 8.8 · 12% likely

    CWE-416Arm

15. The Arm Mali GPU kernel driver allows privilege escalation or a denial of service (memory corruption) because an unprivileged user can achieve read/write access to read-only pages…CVE-2021-28664Arm · CVSS 8.8 · 5.5% likely

    CWE-787Arm

16. In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the printing out of secure data when calling secure functions under…CVE-2021-27562Arm · CVSS 5.5 · 3.1% likely

    CWE-787Arm

17. . The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege escalation. This affects Bifros…CVE-2021-29256Arm · CVSS 8.8 · 3.0% likely

    CWE-416Arm

18. Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago…CVE-2021-1905Qualcomm, Inc. · CVSS 8.4 · 1.5% likely

    CWE-416Qualcomm, Inc.

19. Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon…CVE-2021-1906Qualcomm, Inc. · CVSS 6.2 · 0.5% likely

    Qualcomm, Inc.

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.