Exploited in the wild

Every one of the 16 is a mark on the map. Named now: 1 to 16, most at risk first.

1. ForgeRock OpenAM <7.0 - Remote Code ExecutionCVE-2021-35464ForgeRock · CVSS 9.8 · 100% likely

   CWE-502ForgerockScattered Spider3 bounty reports

2. Exchange Server - Remote Code ExecutionCVE-2021-34473Microsoft · CVSS 9.1 · 100% likely

   CWE-918MicrosoftAPT35

3. Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2021-34523Microsoft · CVSS 9 · 100% likely

   MicrosoftAPT35

4. Windows Print Spooler Remote Code Execution VulnerabilityCVE-2021-34527Microsoft · CVSS 8.8 · 100% likelycovered by CyberSIXT

   Microsoft

5. Microsoft Exchange - Authentication BypassCVE-2021-33766Microsoft · CVSS 7.3 · 98% likely

   Microsoft

6. SolarWinds Serv-U FTP - Remote Code ExecutionCVE-2021-35211SolarWinds · CVSS 9 · 91% likely

   CWE-787SolarWinds

7. Kaseya VSA < 9.5.7 - Credential Disclosure via Windows AgentCVE-2021-30116Kaseya · CVSS 10 · 86% likely

   CWE-522Kaseya

8. Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACECVE-2021-22555Linux · CVSS 8.3 · 79% likelycovered by CyberSIXT

   CWE-787Linux

9. Windows Elevation of Privilege VulnerabilityCVE-2021-36934Microsoft · CVSS 7.8 · 67% likely

   MicrosoftAPT29

10. Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2021-31196Microsoft · CVSS 7.2 · 54% likely

    Microsoft

11. Scripting Engine Memory Corruption VulnerabilityCVE-2021-34448Microsoft · CVSS 6.8 · 40% likely

    CWE-787Microsoft

12. Windows Kernel Elevation of Privilege VulnerabilityCVE-2021-33771Microsoft · CVSS 7.8 · 10% likely

    Microsoft

13. Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.CVE-2021-30554Google · CVSS 8.8 · 7.4% likely

    CWE-416Google

14. An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1 allows a remote attached to upl…CVE-2021-36741Trend Micro · CVSS 8.8 · 5.0% likely

    CWE-434Trend Micro

15. Windows Kernel Elevation of Privilege VulnerabilityCVE-2021-31979Microsoft · CVSS 7.8 · 4.5% likely

    CWE-119Microsoft

16. A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escala…CVE-2021-36742Trend Micro · CVSS 7.8 · 1.5% likely

    CWE-20Trend Micro

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.