Exploited in the wild

Every one of the 18 is a mark on the map. Named now: 1 to 18, most at risk first.

1. Apache 2.4.49 - Path Traversal and Remote Code ExecutionCVE-2021-41773Apache Software Foundation · CVSS 7.5 · 100% likely

   CWE-22Apache2 bounty reports

2. Apache 2.4.49/2.4.50 - Path Traversal and Remote Code ExecutionCVE-2021-42013Apache Software Foundation · CVSS 9.8 · 100% likely

   CWE-22Apache2 bounty reports

3. Grafana Snapshot - Authentication BypassCVE-2021-39226grafana · CVSS 9.8 · 100% likely

   CWE-287Grafana1 bounty report

4. Draytek VigorConnect 6.0-B3 - Local File InclusionCVE-2021-20124DrayTek · CVSS 7.5 · 96% likely

   CWE-22Draytek

5. Draytek VigorConnect 1.6.0-B - Local File InclusionCVE-2021-20123DrayTek · CVSS 7.5 · 90% likely

   CWE-22Draytek

6. YeaLink DM 3.6.0.20 - Remote Command InjectionCVE-2021-27561Yealink · CVSS 9.8 · 84% likely

   CWE-78Yealink

7. Win32k Elevation of Privilege VulnerabilityCVE-2021-40449Microsoft · CVSS 7.8 · 82% likely

   CWE-416Microsoft

8. BillQuick Web Suite SQL InjectionCVE-2021-42258BQE · CVSS 9.8 · 75% likely

   CWE-89BQE

9. Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.CVE-2021-30632Google · CVSS 8.8 · 63% likely

   CWE-787Google

10. Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.CVE-2021-37975Google · CVSS 8.8 · 35% likely

    CWE-416Google

11. Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape…CVE-2021-30633Google · CVSS 9.6 · 33% likely

    CWE-416Google

12. A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1, watchOS 7.6.1. An application may…CVE-2021-30807Apple · CVSS 7.8 · 29% likely

    CWE-787Apple

13. Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information from process memory via a craft…CVE-2021-37976Google · CVSS 6.5 · 20% likely

    CWE-862Google

14. Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a c…CVE-2021-37973Google · CVSS 9.6 · 12% likely

    CWE-416Google

15. Win32k Elevation of Privilege VulnerabilityCVE-2021-41357Microsoft · CVSS 7.8 · 1.5% likely

    Microsoft

16. Win32k Elevation of Privilege VulnerabilityCVE-2021-40450Microsoft · CVSS 7.8 · 1.5% likely

    Microsoft

17. Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by der…CVE-2021-25487Samsung Mobile · CVSS 7.3 · 0.6% likely

    CWE-125Samsung

18. Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic.CVE-2021-25489Samsung Mobile · CVSS 3.3 · 0.5% likely

    CWE-20Samsung

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.