Exploited in the wild

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

1. Windows Print Spooler Remote Code Execution VulnerabilityCVE-2021-1675Microsoft · CVSS 7.8 · 85% likely

   Microsoft

2. Windows Kernel Information Disclosure VulnerabilityCVE-2021-31955Microsoft · CVSS 5.5 · 81% likely

   CWE-497Microsoft

3. Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.CVE-2021-30551Google · CVSS 8.8 · 65% likely

   CWE-843Google

4. Windows MSHTML Platform Remote Code Execution VulnerabilityCVE-2021-33742Microsoft · CVSS 7.5 · 59% likely

   CWE-787Microsoft

5. GitLab CI Lint API - Server-Side Request ForgeryCVE-2021-22175GitLab · CVSS 6.8 · 53% likelycovered by CyberSIXT

   CWE-918GitLab

6. OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via system_settings.shtm.CVE-2021-26829OpenPLC · CVSS 5.4 · 48% likely

   CWE-79OpenPLC

7. OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm.CVE-2021-26828OpenPLC · CVSS 8.8 · 39% likely

   CWE-434OpenPLC

8. Windows NTFS Elevation of Privilege VulnerabilityCVE-2021-31956Microsoft · CVSS 7.8 · 22% likely

   CWE-191Microsoft

9. Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions via a crafted iframe.CVE-2021-30533Google · CVSS 6.5 · 17% likely

   CWE-863Google

10. Microsoft DWM Core Library Elevation of Privilege VulnerabilityCVE-2021-33739Microsoft · CVSS 8.4 · 6.6% likely

    Microsoft

11. Microsoft Enhanced Cryptographic Provider Elevation of Privilege VulnerabilityCVE-2021-31199Microsoft · CVSS 5.2 · 3.0% likely

    Microsoft

12. Microsoft Enhanced Cryptographic Provider Elevation of Privilege VulnerabilityCVE-2021-31201Microsoft · CVSS 5.2 · 2.6% likely

    Microsoft

13. Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti…CVE-2020-11261Qualcomm, Inc. · CVSS 7.8 · 1.5% likely

    CWE-20Qualcomm, Inc.

14. A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised.CVE-2021-25394Samsung Mobile · CVSS 6.4 · 0.4% likely

    CWE-416Samsung

15. A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised.CVE-2021-25395Samsung Mobile · CVSS 6.4 · 0.4% likely

    CWE-362Samsung

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.